Behavioral task
behavioral1
Sample
369e536bf6e957b353a27fb0b23a1562201d57298f2d54cf3460cdc1b3db632e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
369e536bf6e957b353a27fb0b23a1562201d57298f2d54cf3460cdc1b3db632e.exe
Resource
win10v2004-20220901-en
General
-
Target
369e536bf6e957b353a27fb0b23a1562201d57298f2d54cf3460cdc1b3db632e
-
Size
1.3MB
-
MD5
6823dd4ad45600a695c237bc4b31fd1e
-
SHA1
c2c6b8c12c2a506a9e26950ff8e342983d6b7b9e
-
SHA256
369e536bf6e957b353a27fb0b23a1562201d57298f2d54cf3460cdc1b3db632e
-
SHA512
06bac2dd33e8d5352ab73091ef6fc52a011948b172c22ec54d1b2f488a16d477e401be682a188b9d60250bc9163734f0d3c448753b48af0e5a5d11761e37a96d
-
SSDEEP
24576:LfH0mMRWRlRCFs0E62U7ibu1DIOqpczZOezezZC3YU:Ls1g7RCGs7iEO0e1JU
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
369e536bf6e957b353a27fb0b23a1562201d57298f2d54cf3460cdc1b3db632e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 92KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE