Behavioral task
behavioral1
Sample
5577b6af2967c973fe247348c7aba41cd505ff6bf8a6da201139c752b2407d71.exe
Resource
win7-20220718-en
General
-
Target
5577b6af2967c973fe247348c7aba41cd505ff6bf8a6da201139c752b2407d71
-
Size
585KB
-
MD5
ba9e0339088a770ab44ca3ee76926a52
-
SHA1
162c48be7d14d4ae5a32090f5d98f8893ab1f007
-
SHA256
5577b6af2967c973fe247348c7aba41cd505ff6bf8a6da201139c752b2407d71
-
SHA512
310c827af36e8f3870e38872929d8a8147444c525b44890ed758aaa27c02de13609f0412f6cbf3a37e75bdb50289495e0a4d4ba53025e276a6e9be78d17c971b
-
SSDEEP
12288:LIH8kh6EzMikfpZcWyCwUPZD4SnAOS21Lw/3VNHxU845Er8zN:LCImMfgWyCwAD4ShS21LwdNh4n
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
5577b6af2967c973fe247348c7aba41cd505ff6bf8a6da201139c752b2407d71.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 554KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE