Behavioral task
behavioral1
Sample
35c3c8704bfcec23003c88f1b5b9d381df5f19bab613f5223d4a97daebd9888c.exe
Resource
win7-20220901-en
General
-
Target
35c3c8704bfcec23003c88f1b5b9d381df5f19bab613f5223d4a97daebd9888c
-
Size
750KB
-
MD5
2203e97dab16003b69ff4e42a2da9691
-
SHA1
5d6a282fd17a2b07ce0bdc32785605dfaea757da
-
SHA256
35c3c8704bfcec23003c88f1b5b9d381df5f19bab613f5223d4a97daebd9888c
-
SHA512
0f954db5bbdad03ec0c55396f918acaae4057fb8e31d242320e942d7acbf89a51df756a1d87e5601bb9a8d63c71b8aa59c73a6f9e936a78036caf8abf49f6037
-
SSDEEP
12288:Wm8KOe8gBddzil6GqqLAtyTPg0FlIBtccIaQuKZA+h+Jj6NjYpFnpO1taXoUX9/s:Wg71ddzY6KLAtybg2IBxQVq6+Jj6hEtG
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
35c3c8704bfcec23003c88f1b5b9d381df5f19bab613f5223d4a97daebd9888c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 719KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE