Behavioral task
behavioral1
Sample
ef5329ccd64839fab9a9a81e7d0b2fa327805305cb19444fa384c64f785914a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef5329ccd64839fab9a9a81e7d0b2fa327805305cb19444fa384c64f785914a1.exe
Resource
win10v2004-20220812-en
General
-
Target
ef5329ccd64839fab9a9a81e7d0b2fa327805305cb19444fa384c64f785914a1
-
Size
424KB
-
MD5
88421db567e45da45a413e2fe906308f
-
SHA1
475bf27f25abf73d12c3d2f882a7233977205c7e
-
SHA256
ef5329ccd64839fab9a9a81e7d0b2fa327805305cb19444fa384c64f785914a1
-
SHA512
26b7ed6ec2403ececa970c82027a753dcfff168400fbf9baddc4771efc4dcca4a9620bb1c1e557183e5ab6abd46b72b4ef54fde2e90a7e066b6382ae15f05497
-
SSDEEP
12288:0DTFr0NqbL37tHRxD9mqTNktNaUn9gab/s3yxHrs7:QT9pBJKLnCkAQHr
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ef5329ccd64839fab9a9a81e7d0b2fa327805305cb19444fa384c64f785914a1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 392KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE