Behavioral task
behavioral1
Sample
a352dfa0151f960c591d5222b055a4ef353dc350ddd8eac5e8ffa026f1183ff1.exe
Resource
win7-20220901-en
General
-
Target
a352dfa0151f960c591d5222b055a4ef353dc350ddd8eac5e8ffa026f1183ff1
-
Size
1.4MB
-
MD5
186640d9b8ab2cb7a4ea307498420660
-
SHA1
9080f760932416cffdf6bde7d0b44fddead2c38d
-
SHA256
a352dfa0151f960c591d5222b055a4ef353dc350ddd8eac5e8ffa026f1183ff1
-
SHA512
be560cedb09e394cd4cc6f49c9441ddf6bff4469a0fe331dd6fae00d22e00815b594009850e22e42ae1235910a995bb12a93d17992f9ddc2e0434f04dcecac43
-
SSDEEP
24576:KlbgZSFP5hhvQOktOop3NNVWfRWV1c/6otuiU0W9pJByovqiknd9+H1YfD+5y:WMZSTr20grWfkV1clYpFqikD3F
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a352dfa0151f960c591d5222b055a4ef353dc350ddd8eac5e8ffa026f1183ff1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE