Behavioral task
behavioral1
Sample
1aa03b35da411870878b2692c4a9baff3b250b59bfa1a4e4f7ead0840dff1e10.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1aa03b35da411870878b2692c4a9baff3b250b59bfa1a4e4f7ead0840dff1e10.exe
Resource
win10v2004-20220812-en
General
-
Target
1aa03b35da411870878b2692c4a9baff3b250b59bfa1a4e4f7ead0840dff1e10.exe
-
Size
7.0MB
-
MD5
de81bad2fcfecdbffcb74fcfaa8c4158
-
SHA1
05d273a028773189d7eaaed71d3e0a9c74eaec26
-
SHA256
1aa03b35da411870878b2692c4a9baff3b250b59bfa1a4e4f7ead0840dff1e10
-
SHA512
b4de3422f56423cabd5bb5909873faf4ce68d53fca3ba8c253aba4ae56351ef3355fd8c7db5f1ecf2b8c26a7013b830e9c15ed0a54127b01e7709bd93d99c4b7
-
SSDEEP
98304:QewsZMpcoPXVN15huPk9YabAYeNhVBNa2MoCefqW+RKFhfU06dWA:QeNZMpcMlN1539Y6AYSy6qpRKHc0sWA
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
1aa03b35da411870878b2692c4a9baff3b250b59bfa1a4e4f7ead0840dff1e10.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 18KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vm_sec Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE