Behavioral task
behavioral1
Sample
4ce2cf34817e0f979a5c587ed0cc896100740dd590d438430cb9a872573e759c.exe
Resource
win7-20220812-en
General
-
Target
4ce2cf34817e0f979a5c587ed0cc896100740dd590d438430cb9a872573e759c
-
Size
1.1MB
-
MD5
fb5279b97561bd435225aea0fe380a2b
-
SHA1
05a08e77aaaebee4c5fb7b4b69f1f1e32268a3a9
-
SHA256
4ce2cf34817e0f979a5c587ed0cc896100740dd590d438430cb9a872573e759c
-
SHA512
5f9922f1624b78df4ae4aaf64f03c3e32b4d3a688706ce4f5c9314b7d1118eea9eef174e08cff491c15c4f3b00e6d707f99f9c7e8ab1f46614e57619d97b67db
-
SSDEEP
24576:Jw+l7nRopHFw7TuyMZ2UjdJk9bk/ft1AbO7lzW:JBLRopHFw7TuMUR57AOl
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
4ce2cf34817e0f979a5c587ed0cc896100740dd590d438430cb9a872573e759c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 312KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 825KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE