Behavioral task
behavioral1
Sample
10dff0b06b9914cec7ea2cb3e08532ba76c85de7d6dbb2ccd3305d0d1ed4ae2b.exe
Resource
win7-20220901-en
General
-
Target
10dff0b06b9914cec7ea2cb3e08532ba76c85de7d6dbb2ccd3305d0d1ed4ae2b
-
Size
560KB
-
MD5
017561b5e8b19da5865d2b96093cf115
-
SHA1
12e844b050550ee31554f94b6e64f2b941320ca5
-
SHA256
10dff0b06b9914cec7ea2cb3e08532ba76c85de7d6dbb2ccd3305d0d1ed4ae2b
-
SHA512
952dde57fbe2a212e5c2a14f5eb82b74942a80ae3feac137217ee338a6cac7ef8d057de1aa3ef2e78e0e7856d9645830c11134b69507dc94fa83aad10587cc0b
-
SSDEEP
12288:WWjUW4nZU6xjqTfq4WtwiKGGSimRGN5iIw46Smhq3q:WWF2u6xjq7q4WEdSiWL6mh6q
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
10dff0b06b9914cec7ea2cb3e08532ba76c85de7d6dbb2ccd3305d0d1ed4ae2b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE