Behavioral task
behavioral1
Sample
64cba5bbb90c2ad81d9db115714c3f0a9c5e083a2554eb2ef0aee752fff05ae6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
64cba5bbb90c2ad81d9db115714c3f0a9c5e083a2554eb2ef0aee752fff05ae6.exe
Resource
win10v2004-20221111-en
General
-
Target
64cba5bbb90c2ad81d9db115714c3f0a9c5e083a2554eb2ef0aee752fff05ae6
-
Size
1.3MB
-
MD5
2486632d0b7d3b3ee39fabeebecd260e
-
SHA1
30329c9819f31fb0a4801190a87b63a5d6743bf2
-
SHA256
64cba5bbb90c2ad81d9db115714c3f0a9c5e083a2554eb2ef0aee752fff05ae6
-
SHA512
7544cfac631e8ca09d0687f6b9f704b25fbc9d2ab8170827ee899ce9c7332e06ee44900e0b141a97236124c802707de61cd664784490cf94a45672985cca7d50
-
SSDEEP
24576:AHKa+YuQLuDEICljs6a+oN0NxoblUIgBkKAvrMOgQjaEefuCjfV7nUVGP:AHr2jDEBahNux7dBkKAvQxRnUV
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
64cba5bbb90c2ad81d9db115714c3f0a9c5e083a2554eb2ef0aee752fff05ae6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 829KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 454KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE