Behavioral task
behavioral1
Sample
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0.exe
Resource
win7-20220715-en
General
-
Target
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0
-
Size
3.1MB
-
MD5
542298aa62750cd818d3dad2290313aa
-
SHA1
1cd88165dca314a4363f50d59596c03362b01bae
-
SHA256
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0
-
SHA512
10fca949c1467fff74764f399c1f9795b5bafd9d8895aa68795f5ea6516c333856b034e9e2b03beb3e989397cc1e12cf38703338775fa503093215e197e27919
-
SSDEEP
49152:k1MjGV2DM9F3Ly/JHoKxjtVmqTPhSVHhA7+ZeXfn4kuQW9avzpHKdM+6lY1Q/omG:6MCfr+hHoKp3j4BQAkC+zpquTCmu
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
e66a001712595492e31b33bd698e1d7fbaeb3b2f49b04389d1177d9adefe72c0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 325KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 84KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 27KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 66KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ