Behavioral task
behavioral1
Sample
21ea8ba244923391ba4bbf0ae6e326145718cd19f4f8d65df0bb11f01f3b1667.exe
Resource
win7-20220901-en
General
-
Target
21ea8ba244923391ba4bbf0ae6e326145718cd19f4f8d65df0bb11f01f3b1667
-
Size
1.3MB
-
MD5
822ffe0e99ef3016a5f951d681465497
-
SHA1
63276f099f9727bf7871355c93db24b8090f30b5
-
SHA256
21ea8ba244923391ba4bbf0ae6e326145718cd19f4f8d65df0bb11f01f3b1667
-
SHA512
a9f6f94c1e7d2d1d18515fb3a4d091baa7f0fdad34720d88968ed2b0c8fe36ea92a08426e229a02d2cfa3c17a39bbfba400b91ccb41c1687c878e8357f4fcc14
-
SSDEEP
24576:7Cy1VHGK0n6DHHOQ/fLF/Yeb/vFBRnH5FrscbTlYUiKMl3RSQBKu:7p1V6kHu8TnFHOeYRSQBKu
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
21ea8ba244923391ba4bbf0ae6e326145718cd19f4f8d65df0bb11f01f3b1667.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 200KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 642KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 712KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE