Behavioral task
behavioral1
Sample
798d23778b1f30cde74eaff5ecc34108a4789b38088bc50ad0cf3fcf4867e650.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
798d23778b1f30cde74eaff5ecc34108a4789b38088bc50ad0cf3fcf4867e650.exe
Resource
win10v2004-20220812-en
General
-
Target
798d23778b1f30cde74eaff5ecc34108a4789b38088bc50ad0cf3fcf4867e650
-
Size
888KB
-
MD5
0dd766a3bf839d9959fe4906c00de5d2
-
SHA1
445cb3cc895d85a2bc6bdfd6b758cb08da6a651e
-
SHA256
798d23778b1f30cde74eaff5ecc34108a4789b38088bc50ad0cf3fcf4867e650
-
SHA512
b7dc48bb4d16284169cf14aaa4e9cd82ef4bad1b24dfbba7c5ae48d914e6b89912c490155271ecc3bdd33da3612acddd20d21e7b946e6ab149813b373e6a455b
-
SSDEEP
12288:j1TnCgOUH0RcQ0emH8kIisk0V4sRSVc7ZJmaFekhnJT8Sh8q1sJDTVyis32Enpvx:BCgOUpQEHdTsjVZ2QmaHn7h1olEFm/T
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
798d23778b1f30cde74eaff5ecc34108a4789b38088bc50ad0cf3fcf4867e650.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 539B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 796KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE