Behavioral task
behavioral1
Sample
6d4d0fda6b82079ff4cc53f6c510c45ce1bb9a7726442b186588432b144c4003.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d4d0fda6b82079ff4cc53f6c510c45ce1bb9a7726442b186588432b144c4003.exe
Resource
win10v2004-20220812-en
General
-
Target
6d4d0fda6b82079ff4cc53f6c510c45ce1bb9a7726442b186588432b144c4003
-
Size
824KB
-
MD5
5bec3b07c4dafdd748c76da56b326e54
-
SHA1
789351b002980233b9c7813b09b89fd870d84bc0
-
SHA256
6d4d0fda6b82079ff4cc53f6c510c45ce1bb9a7726442b186588432b144c4003
-
SHA512
708da09a6e6331c6a2bfab0821284f7ce9266882882088214d885a75b4391d1e0a5de2fec57349102bee175c36cc7e9c0264633326bd784b1297fb40ea30f34b
-
SSDEEP
12288:cpN5uWcEpbmN819HdpUrlQ31Vuu0z5cK9TA0N0TYyVJpV7vi/z:cpN9pbmN8PAQMz5cK9fNOY8W7
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
6d4d0fda6b82079ff4cc53f6c510c45ce1bb9a7726442b186588432b144c4003.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 796KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE