Behavioral task
behavioral1
Sample
bda15a7edd212d9e8643e656600029f7e56dbdf258276e367243878586371ecc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bda15a7edd212d9e8643e656600029f7e56dbdf258276e367243878586371ecc.exe
Resource
win10v2004-20220901-en
General
-
Target
bda15a7edd212d9e8643e656600029f7e56dbdf258276e367243878586371ecc
-
Size
1.7MB
-
MD5
ac84abd810d65d4516fb31651ce4505e
-
SHA1
b680c9ab64bc27accf997d8cd354042f43b3b730
-
SHA256
bda15a7edd212d9e8643e656600029f7e56dbdf258276e367243878586371ecc
-
SHA512
1f5729ed99ac4947212d6ae5c5e895a5393a5db826645ee09a9ca988d6263381d69d8461b142e154b88a5b871437c1e2520acc0e6be07c2253a0953cc05ad98b
-
SSDEEP
24576:i4I6YDXnT/vdPv+bEf0MGhkGkwSwdhH34JrWOw47QBh80WHaGewkBB9v1X9IN:9YbT5WbEf3GhkpwFP9K0iaGwVAN
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
bda15a7edd212d9e8643e656600029f7e56dbdf258276e367243878586371ecc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE