Behavioral task
behavioral1
Sample
81a95d7b4f0fc74043071e351558922dbbf29dc47a29a12de70bebbdc0a6f6c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81a95d7b4f0fc74043071e351558922dbbf29dc47a29a12de70bebbdc0a6f6c4.exe
Resource
win10v2004-20220812-en
General
-
Target
81a95d7b4f0fc74043071e351558922dbbf29dc47a29a12de70bebbdc0a6f6c4
-
Size
1.4MB
-
MD5
eba220bcc13423d383f285438669cec5
-
SHA1
1ade0f0e5efc15d3efcf6cb7ddd4dfd0096fe46d
-
SHA256
81a95d7b4f0fc74043071e351558922dbbf29dc47a29a12de70bebbdc0a6f6c4
-
SHA512
049223b673ff87836d861aebda02fac9a7ba77136c3719684e259011f59c133db01ad856fff8405964c23653c7c56a1b27e5063f75b449a2c30e7add9815ff1b
-
SSDEEP
24576:GvynbWfwRxLEVDihfe2AaCQM4ksKi2MxePpyXC1yF84L4+arDT7ExY1:GvynbKG9Be2AOM4oi2MxePUXC1LHrDTo
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
81a95d7b4f0fc74043071e351558922dbbf29dc47a29a12de70bebbdc0a6f6c4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 271KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE