Behavioral task
behavioral1
Sample
fdc6e0e315b84ab1a9232fa33f716290798063775100bb7228a7a6030550b8e8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fdc6e0e315b84ab1a9232fa33f716290798063775100bb7228a7a6030550b8e8.dll
Resource
win10v2004-20220812-en
General
-
Target
fdc6e0e315b84ab1a9232fa33f716290798063775100bb7228a7a6030550b8e8
-
Size
632KB
-
MD5
2967832bb802ea14c29c5aa10a9f196c
-
SHA1
3274e36c88aec52942a4b9e88ba09eea40c5410e
-
SHA256
fdc6e0e315b84ab1a9232fa33f716290798063775100bb7228a7a6030550b8e8
-
SHA512
a5f39595703aa6bbe7177570607760df141f588d274e8b40fd3a7de22b99db153b14a8983e1df455374f6683031427d5e0ff7a5a07ce3a8600b591b860cd32d9
-
SSDEEP
12288:zsE9SU6n3tqqF7sA2tXf4RhGFAh9kGQzkWk5HwnMRh2mc8U:P6nnfR4ae4dwMC58
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
fdc6e0e315b84ab1a9232fa33f716290798063775100bb7228a7a6030550b8e8.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 616KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE