Behavioral task
behavioral1
Sample
77f98d7114a4408428de7f6048125f497dcda14afb213b0930883f992bb46e25.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77f98d7114a4408428de7f6048125f497dcda14afb213b0930883f992bb46e25.exe
Resource
win10v2004-20220812-en
General
-
Target
77f98d7114a4408428de7f6048125f497dcda14afb213b0930883f992bb46e25
-
Size
30KB
-
MD5
d8bc674210e01cbb39c8019ed010804b
-
SHA1
8f7c7daf2286bc1202263b0b4de27ea21f9160ce
-
SHA256
77f98d7114a4408428de7f6048125f497dcda14afb213b0930883f992bb46e25
-
SHA512
f4e4250e9cb241bfb373f7b04c4593f1b0a41880e6fbe11f499914ae33682dadd03f4fc0e5a856e9ec7b218d5686baa1d3090cc953f5ed0fdf8f22cca241cd55
-
SSDEEP
768:RuZcwxSbnOaVfZP7DSLB1DJcGL9Hx0X0t42nI:QmJLOaVf1S11DJbL9K6nI
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
77f98d7114a4408428de7f6048125f497dcda14afb213b0930883f992bb46e25.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 29KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE