Behavioral task
behavioral1
Sample
0bda2c2edc4b45027af223e35abf9b0226af1ee577196bb20e803266302ce0b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bda2c2edc4b45027af223e35abf9b0226af1ee577196bb20e803266302ce0b8.exe
Resource
win10v2004-20220812-en
General
-
Target
0bda2c2edc4b45027af223e35abf9b0226af1ee577196bb20e803266302ce0b8
-
Size
1.2MB
-
MD5
8400577beebc35cc12b021dc672f30ac
-
SHA1
8c152114a5d5c2e2fc5321ed570a5e4636afa2a5
-
SHA256
0bda2c2edc4b45027af223e35abf9b0226af1ee577196bb20e803266302ce0b8
-
SHA512
8db2c8eab06ba776ff6662cc9af5c2a05c899922833be33e728c3d2003afef3d31b05389e879575aac92e5467e4f43f48a50530472421a210040fdbe459b0bfd
-
SSDEEP
24576:tkrA2HckVsIb635JBxc2Tk/rPp5yCWU9b32D7/CDGBZw:tOEIGJZHkjPyClbELCDGY
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
0bda2c2edc4b45027af223e35abf9b0226af1ee577196bb20e803266302ce0b8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE