Behavioral task
behavioral1
Sample
7419742e27e61e156ef9abeaaace09c3921a44c59bd9af441ba4468e46a18a17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7419742e27e61e156ef9abeaaace09c3921a44c59bd9af441ba4468e46a18a17.exe
Resource
win10v2004-20220812-en
General
-
Target
7419742e27e61e156ef9abeaaace09c3921a44c59bd9af441ba4468e46a18a17
-
Size
1.6MB
-
MD5
69106c2bfcfa15da265057de36b32818
-
SHA1
b35170e4c4b9ca7ca93cf30fa6b399e26e202ac6
-
SHA256
7419742e27e61e156ef9abeaaace09c3921a44c59bd9af441ba4468e46a18a17
-
SHA512
ec53ba6bb4118800ef2ba733b7b8b649eda3acbec749440cf343833c683d2c414a81bfb3a31edda5fc7a0dab678dba7b6d870b7bd040dfee2c1c48fde6738574
-
SSDEEP
24576:pHIxHgyx8s3qTJOWQGXlF/zW+mrUnnsZi5Zx7Gk+DH3M/dQ3h+jQ4hz59WHb9HDe:poxpZi7iIf5mZT8lcKkZTUfezSA
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
7419742e27e61e156ef9abeaaace09c3921a44c59bd9af441ba4468e46a18a17.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE