Behavioral task
behavioral1
Sample
d12c7e26fee1ef6d8045ad38b941abaf474a7054d3ee3ef028c099b6e0b597e6.exe
Resource
win7-20220812-en
General
-
Target
d12c7e26fee1ef6d8045ad38b941abaf474a7054d3ee3ef028c099b6e0b597e6
-
Size
644KB
-
MD5
041f78dd12a1541802f909649ed638c0
-
SHA1
f32808798f13c303cc5de6cdc2e8411acb29c63f
-
SHA256
d12c7e26fee1ef6d8045ad38b941abaf474a7054d3ee3ef028c099b6e0b597e6
-
SHA512
12e342fbbe39f8a715ccbca95f7408db68291a91b484b6a48969d387524b205ea2fc0d2bf5203f30765406b439861156cc7f474ac5bf7cd0ebe3ed77a0f155d7
-
SSDEEP
12288:fergEKNuSWZZ+dFIYeFGPnOP2QpLHpBSZ1ejZnn+8iFPu+8S9:fOouSWZ8dzewPOP/pLH6Z1ejZnnHieS
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
d12c7e26fee1ef6d8045ad38b941abaf474a7054d3ee3ef028c099b6e0b597e6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 616KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE