Behavioral task
behavioral1
Sample
091e2f9e98f85a667be7612ababd1627ab4dccd979e0d61e2cd617cae5fed19d.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
091e2f9e98f85a667be7612ababd1627ab4dccd979e0d61e2cd617cae5fed19d.exe
Resource
win10v2004-20220722-en
General
-
Target
091e2f9e98f85a667be7612ababd1627ab4dccd979e0d61e2cd617cae5fed19d
-
Size
2.8MB
-
MD5
b680447b98430ca1c53278f7155c2a96
-
SHA1
fcc51c0b1270c4ffa1cdd58339bc0332078ee58f
-
SHA256
5c2c32d8b19a3be5d169bf6389f752a1d5f82851d48854a47cb7eb94724d3372
-
SHA512
aa0c86960908cd1a92302699c1004abc1de79e1326af6bbd38c6d3bc3c47b1998590b2c021262ff40d54d76cf0c6d9df6560916901ea4c3f09ff7fc17bfd87f5
-
SSDEEP
49152:3htaEvKi89w7H4sRNoDSiYSoFJcjTvWAs75DEqktIhpA1CHr1ZYKmVxjzJW:x4gKXw7H4bDSiY5cHvRS5DRktIhpAQLB
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
091e2f9e98f85a667be7612ababd1627ab4dccd979e0d61e2cd617cae5fed19d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE