Behavioral task
behavioral1
Sample
3e9752f31347cb0588c2b10af002e6b6a1cfef547bfa202b0a8d485438a08658.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e9752f31347cb0588c2b10af002e6b6a1cfef547bfa202b0a8d485438a08658.exe
Resource
win10v2004-20220812-en
General
-
Target
3e9752f31347cb0588c2b10af002e6b6a1cfef547bfa202b0a8d485438a08658
-
Size
2.2MB
-
MD5
070c96a7eb01a89c1950ea87210bb07c
-
SHA1
83dea4cd01c5b0cddbf1b046b26db33e2dc6e4d0
-
SHA256
3e9752f31347cb0588c2b10af002e6b6a1cfef547bfa202b0a8d485438a08658
-
SHA512
cd2876bbbea73e9e482abfed2b521d442cf3c06a266d6a998c8f7887b2a9f2aef4c02a72a48f50d9207764a279db115ed12ddb2fee9e8b4ad73ed7b660b7f600
-
SSDEEP
49152:4dvx0JP7H3CQ1Kgi3GFUMIelZ3HweeeQJ/NMMK7XnsePW:jJTH39IgaGBpwfeYSMK7se+
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
3e9752f31347cb0588c2b10af002e6b6a1cfef547bfa202b0a8d485438a08658.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 320KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE