Behavioral task
behavioral1
Sample
bd146395046457ffed5834dce4d3219401c1ca954b7dbfe36d4133943ee2d123.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd146395046457ffed5834dce4d3219401c1ca954b7dbfe36d4133943ee2d123.exe
Resource
win10v2004-20220901-en
General
-
Target
bd146395046457ffed5834dce4d3219401c1ca954b7dbfe36d4133943ee2d123
-
Size
1.3MB
-
MD5
c0c26b7acc50ad21bc6224190d330ee0
-
SHA1
82fc314e57eeb227a83c18ae9ecb5885954ef583
-
SHA256
bd146395046457ffed5834dce4d3219401c1ca954b7dbfe36d4133943ee2d123
-
SHA512
7a8836f9800228b760086935cf8272cce51b03f2e4a0f105677cff65b7eca7d7f4582d049f870e3fa1e486b1006eac7c024e2dd895886866548b7acd3f7b4cbf
-
SSDEEP
24576:/VXHDaprOmzu9cyzXNQSplTGwrucGdq4wdvdoKE3TVg7Cztx31dmLLA09PLjWna:/NjkYcOSSzGwrudqLvFeTy7Cztx3LHIk
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
bd146395046457ffed5834dce4d3219401c1ca954b7dbfe36d4133943ee2d123.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE