Behavioral task
behavioral1
Sample
d8d3464d5f98aee3f5d12568860d9dd13151ff10c78324211bbd6d8fead150c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8d3464d5f98aee3f5d12568860d9dd13151ff10c78324211bbd6d8fead150c3.exe
Resource
win10v2004-20220812-en
General
-
Target
d8d3464d5f98aee3f5d12568860d9dd13151ff10c78324211bbd6d8fead150c3
-
Size
1.2MB
-
MD5
a35fd7ad78f8335a08977bf2fa450caa
-
SHA1
a4cf4c3d5db71b2437bd2a970f61a14aad44b779
-
SHA256
d8d3464d5f98aee3f5d12568860d9dd13151ff10c78324211bbd6d8fead150c3
-
SHA512
9c2cdbe779829b654c02b347dd73defcb95e639e58c9202f3b07652cf3ee30dde64ce4913dd0022313ea74b44dbb26c78a266a11882687b56b756721d15a717b
-
SSDEEP
24576:u744EegyW6PjBhnKb1Bpnbnn7p3lh9xDWMxFz7SyRwQxKanQ0+upXLwfH:ukXeVd9RKfhXhqMLb24M3EU
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
d8d3464d5f98aee3f5d12568860d9dd13151ff10c78324211bbd6d8fead150c3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE