Behavioral task
behavioral1
Sample
cf3a126efa4ed2256e0150cf72c10821f275b0ca1cf5b657a9b8d7d45653b9e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf3a126efa4ed2256e0150cf72c10821f275b0ca1cf5b657a9b8d7d45653b9e1.exe
Resource
win10v2004-20220812-en
General
-
Target
cf3a126efa4ed2256e0150cf72c10821f275b0ca1cf5b657a9b8d7d45653b9e1
-
Size
2.3MB
-
MD5
2642ecd3b5c1a2f3b5077b64893c2d90
-
SHA1
dd37ed73ad6038cff496e2b83de1dd39a5f00b87
-
SHA256
cf3a126efa4ed2256e0150cf72c10821f275b0ca1cf5b657a9b8d7d45653b9e1
-
SHA512
3ba32308408964ed2b768e1d5d79f4a29217773f81be1183ca19660e9f08dfd7341ba87c7c58ed6cfae983f48f85af9b5782df314f5b7756af73cc072e969c75
-
SSDEEP
49152:431TdsegI0wHeOjOnghuvj6mqjH+ozr5gGW0bUllH4Vlzt:431Tdsw37uvj6Tj5P5gG5beUt
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
cf3a126efa4ed2256e0150cf72c10821f275b0ca1cf5b657a9b8d7d45653b9e1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 441KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 730KB - Virtual size: 13.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE