Behavioral task
behavioral1
Sample
320000.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
320000.exe
Resource
win10v2004-20220812-en
General
-
Target
320000.exe
-
Size
7.3MB
-
MD5
32f648c1e526989c04326a8ad66eba29
-
SHA1
52aecfae8f8f8498ab688cf687cdc8eb759690b9
-
SHA256
3f75786862b9cd9eaab5aa65b26e83342f60d1c4fdb7c873f358000aad3082dc
-
SHA512
8d0e0c15b055a073e45364851352040416d91e97c577d404636ea7f3fd7feebdf3f4c5afa694364c4102c6f400d8ea8364609f2b1d48c40750b4a227a684c6e9
-
SSDEEP
196608:1oxk37K/HSQpQGw0IbDrbDYKFYwNxEj+MXc4Uq8XVg:1oxk3aQGw0IbDrPYIfFMM1XK
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
320000.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ