Behavioral task
behavioral1
Sample
bd06e89bc10b22c4d740a0ffd3856cdc9900a9b4fa5cbae6b5ec1645b5c04114.exe
Resource
win7-20220812-en
General
-
Target
bd06e89bc10b22c4d740a0ffd3856cdc9900a9b4fa5cbae6b5ec1645b5c04114
-
Size
664KB
-
MD5
147ddb2548a3e8adb3ae9ed204ab6257
-
SHA1
84bbab8ba04ed8fec019abd93b23eea00955e82c
-
SHA256
bd06e89bc10b22c4d740a0ffd3856cdc9900a9b4fa5cbae6b5ec1645b5c04114
-
SHA512
f38f063bcab8fe633f0b498de2b7d734347b4334a7df6b6b9bdfd81b1d820f155dd8d6b3f6b98aa55753a1eba55c81521f9287b7e83e30874ad9100b1e9bc0b4
-
SSDEEP
12288:0XYzqRB6FigRDcAe2+PkBs/2g6nc25nUaa37MC01Bwn4BknqayCefafiUTjfkyRN:0Xyq2F3Q2IIs/2g6nt5da4CJDlyoKUPP
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
bd06e89bc10b22c4d740a0ffd3856cdc9900a9b4fa5cbae6b5ec1645b5c04114.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 644KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE