Behavioral task
behavioral1
Sample
14e529f825f8f776e2aa4e5f9f97eeee8740905a0ecd18294dd69eb7e019364e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
14e529f825f8f776e2aa4e5f9f97eeee8740905a0ecd18294dd69eb7e019364e.exe
Resource
win10v2004-20220812-en
General
-
Target
14e529f825f8f776e2aa4e5f9f97eeee8740905a0ecd18294dd69eb7e019364e
-
Size
1.2MB
-
MD5
1ab3b63bcfabb46d4a1167d712c1284b
-
SHA1
319c644137e6d5dec0475949fa9c4ffd9af7d175
-
SHA256
14e529f825f8f776e2aa4e5f9f97eeee8740905a0ecd18294dd69eb7e019364e
-
SHA512
c44e29f34d25e6423b26f77550cd4df3cbadba8ab1bc86d8999e3c57459767ac28394e3feea75bdbbd0fea02901225286946ec66dd0a35df65c49fb2abb0b4d1
-
SSDEEP
24576:+3foAMk+H7bmL145WeWDagrvGTiMfrflBqPn/gxeM6E6g7ZQ1Si:efvj+I45TWDWzfJBq/oxeFZglQ1z
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
14e529f825f8f776e2aa4e5f9f97eeee8740905a0ecd18294dd69eb7e019364e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE