Behavioral task
behavioral1
Sample
f2e15eaf886f46e8857925e1eff798bfd333b4e08189d003174e9f496bd4d991.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2e15eaf886f46e8857925e1eff798bfd333b4e08189d003174e9f496bd4d991.exe
Resource
win10v2004-20221111-en
General
-
Target
f2e15eaf886f46e8857925e1eff798bfd333b4e08189d003174e9f496bd4d991
-
Size
1.3MB
-
MD5
45965fab048836e7b0cceeb5ae462254
-
SHA1
01e6ce327d14b4a16e84832aa934c54b4295d0bd
-
SHA256
f2e15eaf886f46e8857925e1eff798bfd333b4e08189d003174e9f496bd4d991
-
SHA512
04c641524244613987e3947b3736ff8261720cb80997e1a7c3469b70e6368077ca9c73d92422a4cb0e9da41029010e787ae5ed2226aa2610c9b50ed0f3f1141d
-
SSDEEP
24576:4hF/ZRfDfZ7Ey+wp635AuGhoeJWMa8xEq/AeEHU:4xRfDfZQyfMePhoIl73/A50
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f2e15eaf886f46e8857925e1eff798bfd333b4e08189d003174e9f496bd4d991.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 90KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE