Behavioral task
behavioral1
Sample
8336be4203b3284a88cbdb336a16c0dab5f55e63efcd390aa66805a095ec3624.exe
Resource
win7-20220718-en
General
-
Target
8336be4203b3284a88cbdb336a16c0dab5f55e63efcd390aa66805a095ec3624
-
Size
3.1MB
-
MD5
b3c952fa0c0bd888dc75422083fdbd17
-
SHA1
c95a59d704784b43fca22408682415b29cb47bf7
-
SHA256
8336be4203b3284a88cbdb336a16c0dab5f55e63efcd390aa66805a095ec3624
-
SHA512
16bfa4989cf2cc9405bcbcaa8cb638eb5bfd811bbfb3f6cec7994ae62e314994e0455fb2aacb3ec986d4ea67e88e6c5b7cedb80c205227bb99e4e67702a81910
-
SSDEEP
49152:Y//kiTPVXdECjthAnrh1ZO6Tuhgx5CRXOqEikz02y+oSSmDVG7n1Bitn3BQyBUgn:YE4PVXdEYSyE0cziVh+oSvAn1BYxQIU+
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
8336be4203b3284a88cbdb336a16c0dab5f55e63efcd390aa66805a095ec3624.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 326KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 84KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 27KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 66KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ