Behavioral task
behavioral1
Sample
23529849331b5d86e2ec8eccc5a13c42afd746370fff24ef8db1b2cfd7b5a5af.exe
Resource
win7-20220812-en
General
-
Target
23529849331b5d86e2ec8eccc5a13c42afd746370fff24ef8db1b2cfd7b5a5af
-
Size
800KB
-
MD5
ec61cfc0d2e6c65e3766c215318803f8
-
SHA1
736d3932210f2e5cafbe1243a1829ec9b1e1c52d
-
SHA256
23529849331b5d86e2ec8eccc5a13c42afd746370fff24ef8db1b2cfd7b5a5af
-
SHA512
edfe552e2f8254de6883cd8463b11fb265609639fc668b31825a1f6bf09c87d46f0f58355aece7849fa9793c24867ad2122bd1a05e8fb4b051c7a24566886c08
-
SSDEEP
24576:DEDFxRHsVYcbYln1LfNaOVqJA48rdQTDYO+bEQTj1l5Ji:3ZYlnBNaZa48BQwlEK1
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
23529849331b5d86e2ec8eccc5a13c42afd746370fff24ef8db1b2cfd7b5a5af.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 136KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 648KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE