Behavioral task
behavioral1
Sample
d6c41331ea31ac35444db10c7df922d63de5220b642b0846518c7b7b8dfe16e3.dll
Resource
win7-20220901-en
General
-
Target
d6c41331ea31ac35444db10c7df922d63de5220b642b0846518c7b7b8dfe16e3
-
Size
1.0MB
-
MD5
e3d5ec13be07a026224cc07506b97cb8
-
SHA1
6cbb30532a6ff5a6799778a9ea4b36765a463123
-
SHA256
d6c41331ea31ac35444db10c7df922d63de5220b642b0846518c7b7b8dfe16e3
-
SHA512
90ba2e803ee47f2c0d6112040361eb645a2797183a7bb496f7ab99fbe738abf8865c18a973960750285ae09c15643fe957fe5b9187f7de0982b801248af05443
-
SSDEEP
24576:OcIVuXEXMURB2z38zc8LROYJ2i+px1puVz3CDfpGhoTAKy4f:OcI7JB4MHRFk49S7CAD
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
d6c41331ea31ac35444db10c7df922d63de5220b642b0846518c7b7b8dfe16e3.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 258KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.v-lizer Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 717KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE