Behavioral task
behavioral1
Sample
acf0537c620481998eb6b8b82ad34ce3a0b8052d9c217b13854af850a36ac18d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
acf0537c620481998eb6b8b82ad34ce3a0b8052d9c217b13854af850a36ac18d.dll
Resource
win10v2004-20220812-en
General
-
Target
acf0537c620481998eb6b8b82ad34ce3a0b8052d9c217b13854af850a36ac18d
-
Size
80KB
-
MD5
924f2c640a062e5db3dab6b254aa22db
-
SHA1
578e8696ed27843192fc906496d60188d0c4264a
-
SHA256
acf0537c620481998eb6b8b82ad34ce3a0b8052d9c217b13854af850a36ac18d
-
SHA512
a975ccbf1b23ac35a13c894d48f851d5c4fce25c32f169bf86d2092dcd30455812bddce331a39786b9af200e9a2199c0526b65816f5353198ea93cdf15f812bd
-
SSDEEP
1536:MIBqSAISOZS9uC9TQsBgeLBepEEyqNNytz/qTTGQqvQp:ywSOMkC9TDBgyfyNyZ/TQqvA
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
acf0537c620481998eb6b8b82ad34ce3a0b8052d9c217b13854af850a36ac18d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 656KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE