Behavioral task
behavioral1
Sample
41b8c4c539b1d9e7a882668198e7ec5f45d69ecdf914da52790c20ee35813dd3.exe
Resource
win7-20221111-en
General
-
Target
41b8c4c539b1d9e7a882668198e7ec5f45d69ecdf914da52790c20ee35813dd3
-
Size
2.0MB
-
MD5
15aa112506c79af568ee73e076a91d20
-
SHA1
ee8f78d52aa3e6a77d46e94c4610e1ed3eed1bad
-
SHA256
41b8c4c539b1d9e7a882668198e7ec5f45d69ecdf914da52790c20ee35813dd3
-
SHA512
808134fb5cce96d5e3702136ffc0ce3a44a83a38cb19689e9ef53b5bbdcc79c27cbe35a90e9fc46a5a0ab90f7ee884fc03edf6f847598d9be4aec32ec855a39a
-
SSDEEP
24576:gYnzm05HAm26aExhaPpzoQbUAv/tYR4RENUthtI0eUx/Fz7tB7KgUPC5baoM7nhK:/Hgm2QYxB5Kktxltl4CGoM7ndl2Oanlb
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
41b8c4c539b1d9e7a882668198e7ec5f45d69ecdf914da52790c20ee35813dd3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE