Behavioral task
behavioral1
Sample
04694a5ce800f254f86b9067a193bedcafb9ec77c2056036dc51e64a90aa124e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
04694a5ce800f254f86b9067a193bedcafb9ec77c2056036dc51e64a90aa124e.exe
Resource
win10v2004-20221111-en
General
-
Target
04694a5ce800f254f86b9067a193bedcafb9ec77c2056036dc51e64a90aa124e
-
Size
1.3MB
-
MD5
fd6d79778158ff4a2599021515520941
-
SHA1
a3986f8cd8e25850201bc67cc6f25065548597e6
-
SHA256
04694a5ce800f254f86b9067a193bedcafb9ec77c2056036dc51e64a90aa124e
-
SHA512
2ed5a5e988f6bde1441e1672113d77620e36af1f8f8ab65d885045fcdfdabba32c1e0ba6867687cbc62d3cd332c95e48c47e946f0fa2d7dbae2b1591546ce440
-
SSDEEP
24576:cwawNbMZMqnnbpUhXonqudNWr4nmucZCi4g2BBo+8NGd7c7Kx2nh7kGCah:iwxMiabKYN44Fhi1wGN0cPhn9h
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
04694a5ce800f254f86b9067a193bedcafb9ec77c2056036dc51e64a90aa124e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE