Behavioral task
behavioral1
Sample
14182e84f6b680ecd44a9254cb10a03d84609c9b20135b68e993ecc4113357cf.exe
Resource
win7-20220901-en
General
-
Target
14182e84f6b680ecd44a9254cb10a03d84609c9b20135b68e993ecc4113357cf
-
Size
912KB
-
MD5
75201d765f716d5a238d65db37cbcd12
-
SHA1
4e7b4002bdb5fbed666967d32a4fcfb7f2461464
-
SHA256
14182e84f6b680ecd44a9254cb10a03d84609c9b20135b68e993ecc4113357cf
-
SHA512
b6112f4964518c6237fef559b27b070b6322245fe9b286a434ce9d275614e91b66b911e7929a1e59b4e257e3708f9290636165ae570e540cf4cdfa6153c1f768
-
SSDEEP
12288:WdFMGjPl2DmderLq4dx/CMdkcn6sRgEsTKGYK+S4gN9V4JDVAwKCcWMgFs:Wd3jPlABrIs65EsTtYK+uKJ/vK
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
14182e84f6b680ecd44a9254cb10a03d84609c9b20135b68e993ecc4113357cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 204KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 696KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE