Behavioral task
behavioral1
Sample
d3379b78f72c4d706cc5c4d4c2014322dc484c15768abc91c7d3f67f8a7448da.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
d3379b78f72c4d706cc5c4d4c2014322dc484c15768abc91c7d3f67f8a7448da.exe
Resource
win10v2004-20220721-en
General
-
Target
d3379b78f72c4d706cc5c4d4c2014322dc484c15768abc91c7d3f67f8a7448da
-
Size
4.0MB
-
MD5
b8de4a4bd0aa117e8cafb51211d5cb9f
-
SHA1
b9a40c4c72845de49117cb7f52992153167476df
-
SHA256
607a561c6c074f44dd9dc6860c7e1d3f545b2294aeda33f66ced8798f5a1eef7
-
SHA512
32c985c2763b161e8f878d52829b4daef666a232bed124dd98977dd55e401ddf27dd38c1c5ee1e4acf209278fd6aaec8be39d1dd7b2c2b9a36e078dbdce24ebb
-
SSDEEP
98304:UUVNoYm6tPKcqCiHE1hfco1dsFIYoclIb9Ww9Sp4yXu6iwDEsv+wZ:UUbntPKb9ghfcgsFKdbgwUphXu6iwws
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
d3379b78f72c4d706cc5c4d4c2014322dc484c15768abc91c7d3f67f8a7448da.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE