Behavioral task
behavioral1
Sample
4529c2d4d0915e5c32a543aaa81ed2d509eb9d0733e7f0e333a11d461e51ddf4.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
4529c2d4d0915e5c32a543aaa81ed2d509eb9d0733e7f0e333a11d461e51ddf4.exe
Resource
win10v2004-20220721-en
General
-
Target
4529c2d4d0915e5c32a543aaa81ed2d509eb9d0733e7f0e333a11d461e51ddf4
-
Size
3.8MB
-
MD5
2accc6018ec65babe00bd63a88d90205
-
SHA1
5b8dc1cf860d23d243204e7e41fd96303b41f80b
-
SHA256
782b9bc0e6c96d521165b53cbc03a524547c91d28cbd0523eacae51ad6bc641f
-
SHA512
75c2b3606f86022a6ce06b5b739e83d056597db8161d3bccf776e63f0fb7a544d1d82399531ec64fc3bf62347eb102cf7deaa2792f60c2e7f8900e675cab4258
-
SSDEEP
98304:2fa+FAPOZNqILkKrX/oXJPU3xbe0IJGTzr1gXnPek:Ea+WPOnqILkKrX/o5shbebW+XN
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
4529c2d4d0915e5c32a543aaa81ed2d509eb9d0733e7f0e333a11d461e51ddf4.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 18KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE