Behavioral task
behavioral1
Sample
caea6736a4344b6b868c9d716b10e500b771bf471328ce30ee41dfdd63fde7d3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
caea6736a4344b6b868c9d716b10e500b771bf471328ce30ee41dfdd63fde7d3.exe
Resource
win10v2004-20220812-en
General
-
Target
caea6736a4344b6b868c9d716b10e500b771bf471328ce30ee41dfdd63fde7d3
-
Size
1.5MB
-
MD5
13a646e23a2b44c1b503a403075907ce
-
SHA1
82e728534129acc6d356add3e95c097fd3f2a731
-
SHA256
caea6736a4344b6b868c9d716b10e500b771bf471328ce30ee41dfdd63fde7d3
-
SHA512
5cf677f43f05c579cca443b14b892fd2d0055f4646d78626cd3bfa12f10def1ccf1a075ed9d4414bb2a601214457b3a521b485c8f9c57e0b798f6c9220d76c4b
-
SSDEEP
24576:PirALSYSF2BH2/CVN/7qVRw71u/z3sGtGB0KtGbtsyu8UssmxlfUDmL9mDpuEbFX:MANSF2BeCVtu/z3LQGxs0Xt8mL94oEbN
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
caea6736a4344b6b868c9d716b10e500b771bf471328ce30ee41dfdd63fde7d3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 232KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE