Behavioral task
behavioral1
Sample
691e0b87567767d2a638651f69763bc3315dec72c2e2b454a12c13d2e4068a46.exe
Resource
win7-20220901-en
General
-
Target
691e0b87567767d2a638651f69763bc3315dec72c2e2b454a12c13d2e4068a46
-
Size
1.1MB
-
MD5
92e6623e6c1bb7c83330e33245945fa0
-
SHA1
3bb799da200fa47223468591e33a8e4fd4d166df
-
SHA256
691e0b87567767d2a638651f69763bc3315dec72c2e2b454a12c13d2e4068a46
-
SHA512
b2dd3d944a1740c18c29cee7f5805008374a980ea77a697e6d5560eac54619f37190f6188a8d39b61f4c78d11563418b86262faf58b04fb31eff8e674bb9f20f
-
SSDEEP
24576:O5aswfzSKNmgHflcBPSAuHEyA2zL6yK346GUWD:srm2KNjfaBKA8zLtmWD
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
691e0b87567767d2a638651f69763bc3315dec72c2e2b454a12c13d2e4068a46.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 312KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 802KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE