Behavioral task
behavioral1
Sample
2a2c4b7c419740e479168e857a72eccf3ce07d66bd7f6dfd7a6b9e3b87ee6723.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2a2c4b7c419740e479168e857a72eccf3ce07d66bd7f6dfd7a6b9e3b87ee6723.exe
Resource
win10v2004-20220901-en
General
-
Target
2a2c4b7c419740e479168e857a72eccf3ce07d66bd7f6dfd7a6b9e3b87ee6723
-
Size
1.2MB
-
MD5
17c42e66b6e607712d4c68d1d8dd8ad3
-
SHA1
ab14216f6f451519d08d40d747fc79ac7248222e
-
SHA256
2a2c4b7c419740e479168e857a72eccf3ce07d66bd7f6dfd7a6b9e3b87ee6723
-
SHA512
91976158325574a8d721e711ca2bc66a7033592fa15941347ec7d3fcb7871207e841e3e08c5c6dceb7784fde3dc11612f9b2cbe76b168c1c3a920c772bdfba1c
-
SSDEEP
24576:xrA2yTljbA4GzXeU6o4g52llKO/l/ZT/xRCuH2mX9BwDMhilD9TUvN3vi7:hMljMXzuU9N2rR1ZTiq2CwDMhilD9ovy
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
2a2c4b7c419740e479168e857a72eccf3ce07d66bd7f6dfd7a6b9e3b87ee6723.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE