Behavioral task
behavioral1
Sample
b28c7255c49945250d68c141cf25675d86c7694395eadb9d02ee78d5c9a202fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b28c7255c49945250d68c141cf25675d86c7694395eadb9d02ee78d5c9a202fd.exe
Resource
win10v2004-20220901-en
General
-
Target
b28c7255c49945250d68c141cf25675d86c7694395eadb9d02ee78d5c9a202fd
-
Size
696KB
-
MD5
6651505db61fc3fed6f8dadaa4508f30
-
SHA1
25c9a054117ea0208ee9c802da2085ae8c0ceca7
-
SHA256
b28c7255c49945250d68c141cf25675d86c7694395eadb9d02ee78d5c9a202fd
-
SHA512
27950beb49de6e611be78745e7a82a2ff877e99bbbbf2ba44c4da33ab5a652c32274628c2566a510000eaa52f3b70504c9627e5625ce96c851bd3016062ab084
-
SSDEEP
12288:MZzSilMfMFsyoDBZvt5EA8Scf5d2wirnD48yC2GCX82ettBcl91:4zDs+sVlFt5EAiRmrg8osIf
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
b28c7255c49945250d68c141cf25675d86c7694395eadb9d02ee78d5c9a202fd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 220KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 448KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE