Behavioral task
behavioral1
Sample
48b5b24437afc63fc587bea40a4d494ce8618210f99458d8ff0eb93cec09744c.exe
Resource
win7-20220812-en
General
-
Target
48b5b24437afc63fc587bea40a4d494ce8618210f99458d8ff0eb93cec09744c
-
Size
780KB
-
MD5
92dbc13f455e593a179ea6360dfd9361
-
SHA1
d1f52eb325317eb5fcd940079d9c6c93a4df2905
-
SHA256
48b5b24437afc63fc587bea40a4d494ce8618210f99458d8ff0eb93cec09744c
-
SHA512
33f71cdef6bab2f2b7a85f8befeab5e0042244b866c1da8a5a6abf5fdaca54f272eff6abc114fa5ff21e694dd9436b36061c1fd49f73c9ca84cfe67a3ca1f443
-
SSDEEP
12288:6j8OMMVrOe5JD432zBiFBytfacdGnGjs5tjU3ngp/bpXOQ8zXTdS2yLd5K:6j+MVjH432JbonnyYjhv8zJLWH
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
48b5b24437afc63fc587bea40a4d494ce8618210f99458d8ff0eb93cec09744c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 44KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 503KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 652KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE