Behavioral task
behavioral1
Sample
17787dc6f62191e5be65c547d426ee0db817802c2bffaec5bc00a53fbff29467.exe
Resource
win7-20220812-en
General
-
Target
17787dc6f62191e5be65c547d426ee0db817802c2bffaec5bc00a53fbff29467
-
Size
1.0MB
-
MD5
6a4353ec0f8357fa1c734f87b695d6c1
-
SHA1
06144796310de49cb74b949bfe0adaead9d59786
-
SHA256
17787dc6f62191e5be65c547d426ee0db817802c2bffaec5bc00a53fbff29467
-
SHA512
b44615a506713f235c20a0931fe2b344ca76637e1f87947641cba2491e1ee3f14e2c950285acc737c73b2c57b3fc4fafb2ff74a7a758053cdf0ec08b3b4a4a12
-
SSDEEP
24576:A8aCp7t0+vaoKCxd9LqXKXcMl9bcnDGemfCxi73yf4dMHqGw:ATAvogj9SndeCWTdMKGw
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
17787dc6f62191e5be65c547d426ee0db817802c2bffaec5bc00a53fbff29467.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 324KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 712KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE