Behavioral task
behavioral1
Sample
b2d9de6dc195c6193369c04d7013edac889fdbe1d46046df246828bc051d36bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b2d9de6dc195c6193369c04d7013edac889fdbe1d46046df246828bc051d36bb.exe
Resource
win10v2004-20221111-en
General
-
Target
b2d9de6dc195c6193369c04d7013edac889fdbe1d46046df246828bc051d36bb
-
Size
2.4MB
-
MD5
d556ab6e8c1b6fff46f3fd711bdb4381
-
SHA1
c8ccc0d1a324d0c6fcad4fd39c4f828c9456e476
-
SHA256
b2d9de6dc195c6193369c04d7013edac889fdbe1d46046df246828bc051d36bb
-
SHA512
fb130489fe655ce66475b66e8a88b386befdc4eb893db32e3317fe197e1534bec435b8b057bf0159de966a1d562276f4901ef20a6173fe765519bf160b39646c
-
SSDEEP
49152:NdsEQEnKTJmlb165/rihmz7+HydUK3z2FWJMsJqhH:NyElnnl54/rVIyl3tJFI
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
b2d9de6dc195c6193369c04d7013edac889fdbe1d46046df246828bc051d36bb.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 293KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 410KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE