Behavioral task
behavioral1
Sample
eb49084538d9ce516d50f1c38d1c1036a08ced7cdf1afd016c7247c1207b3826.dll
Resource
win7-20220901-en
General
-
Target
eb49084538d9ce516d50f1c38d1c1036a08ced7cdf1afd016c7247c1207b3826
-
Size
674KB
-
MD5
9945b448b8a8756f6df881583751c30f
-
SHA1
5ded1c81476576883096dd8442d4ceff0da352da
-
SHA256
eb49084538d9ce516d50f1c38d1c1036a08ced7cdf1afd016c7247c1207b3826
-
SHA512
14ad608d3ca35522edcf058a2e162720e48e48d08e3c2ec2b259b7ef2f0b01b01823bc0050976005c43b2341ff7d0ba1d0dceef0c43ab31ccef87527130cda84
-
SSDEEP
12288:1IgPOO9PDKDaO+8SeONMV0Gs5Zp3FJupRG7/8vRaX6qzthVF6FsfsGtOa:ugmOJDKDx3O+V0Gs5ZpyR28pI6qBhdkR
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
eb49084538d9ce516d50f1c38d1c1036a08ced7cdf1afd016c7247c1207b3826.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 621KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE