Behavioral task
behavioral1
Sample
f9621fc31bb49fbb92a04db74b686b999b322ac3bfee189e829ec5613b3bb65e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9621fc31bb49fbb92a04db74b686b999b322ac3bfee189e829ec5613b3bb65e.exe
Resource
win10v2004-20221111-en
General
-
Target
f9621fc31bb49fbb92a04db74b686b999b322ac3bfee189e829ec5613b3bb65e
-
Size
927KB
-
MD5
1d6fb2c1821ba7bb8c17b38b2d2f04a2
-
SHA1
7f9b48284bffe468143d124eaa9b1700cef2082c
-
SHA256
f9621fc31bb49fbb92a04db74b686b999b322ac3bfee189e829ec5613b3bb65e
-
SHA512
e66663ce88e6eddaed2bc9963c87d62bd3075df9280fd0080694d3dcf245126229f89ef5d2310c675d0c2671f8f8ebbbe77cddad5e192655dbb1f3f596014bbb
-
SSDEEP
12288:L+FtpaBPVP1csbCQwkG6r8oe16YgaAYgGa9OtZN10wZK8uAyi4M3pEx2sgAKawNV:LIUCQphNaZzP05DgAKJz
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f9621fc31bb49fbb92a04db74b686b999b322ac3bfee189e829ec5613b3bb65e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 926KB - Virtual size: 943KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE