Behavioral task
behavioral1
Sample
ad9002658bae82384bbc9e4e32d0872abbecab3332abdc300a26d3ff089825dc.dll
Resource
win7-20220812-en
General
-
Target
ad9002658bae82384bbc9e4e32d0872abbecab3332abdc300a26d3ff089825dc
-
Size
2.3MB
-
MD5
2670a424d6c1cbb82aa110014fe7980b
-
SHA1
f7a07f7f91f6526b4907c53542663c4ed2a8a6d2
-
SHA256
ad9002658bae82384bbc9e4e32d0872abbecab3332abdc300a26d3ff089825dc
-
SHA512
a23019911a14fd0bf87a7cba784fc4b22615f413d917868fd7ac174078e60177b83baec6c08bc4c1ddb9097f5f00d35bc449c402abaf6ffb900aec7fc2b68dbe
-
SSDEEP
49152:1gzPSHCYYEJClY5k455JDch61iQluYbYy+FOx:ezPSmBS5kuPDch61iQluYbYy+kx
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ad9002658bae82384bbc9e4e32d0872abbecab3332abdc300a26d3ff089825dc.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 463KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.8MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE