Behavioral task
behavioral1
Sample
60cf8ae3f48cfe0d495b719d48c2ae3307faa5e4726a4da50d68528ebc19f242.exe
Resource
win7-20220812-en
General
-
Target
60cf8ae3f48cfe0d495b719d48c2ae3307faa5e4726a4da50d68528ebc19f242
-
Size
1.0MB
-
MD5
9bed5fe8dd53b17b327dbdec0910ec05
-
SHA1
0197bf8df7973a9e2cc77a980cddd29d76551fc4
-
SHA256
60cf8ae3f48cfe0d495b719d48c2ae3307faa5e4726a4da50d68528ebc19f242
-
SHA512
45a7d193ef8303b11f89a0a200a788e19ba6cdd404490fd30cab5a0146390775f08f8631496835d9e8c02656d08d98591443d9f8c9ff162c244dbf242f75f9ff
-
SSDEEP
24576:+SYXqwU0HAYBhmL9nCViIqUumABJg7bh6K0XsSQzdRs:+bU0nhmkidbJbVXM
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
60cf8ae3f48cfe0d495b719d48c2ae3307faa5e4726a4da50d68528ebc19f242.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 184KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 783KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE