Behavioral task
behavioral1
Sample
cb4ee7bcdc079af33e30f53327849438fc6d3b717b6f01f2e922685af0878a1e.exe
Resource
win7-20220901-en
General
-
Target
cb4ee7bcdc079af33e30f53327849438fc6d3b717b6f01f2e922685af0878a1e
-
Size
2.7MB
-
MD5
f5bf9115fb236ec4e73139baacf7c9a9
-
SHA1
827d04d8a1dff87e1925cacae7ef91a38594cc25
-
SHA256
cb4ee7bcdc079af33e30f53327849438fc6d3b717b6f01f2e922685af0878a1e
-
SHA512
ba271ad6493fe394518551817e8b6697ce9c1d65b9a38be6f1a814312029afcc365598f9f778db267a69d3f35a694d4ff4686dcaf4b50294140f5c3d0f771517
-
SSDEEP
49152:zlzfpT/WOI3K3t+V59XyMGuo3Gn6TOkdo/QEliJa70EVxeN5K44VpvsDx:Jlab3Ut+n92uxLtoEUJa7tmN5iwDx
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
cb4ee7bcdc079af33e30f53327849438fc6d3b717b6f01f2e922685af0878a1e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 42KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.enigma1 Size: 116KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE