Behavioral task
behavioral1
Sample
fb4c2e3c63c09c71f521025d18b894413179c9a24070571246798e0fd3a04762.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fb4c2e3c63c09c71f521025d18b894413179c9a24070571246798e0fd3a04762.dll
Resource
win10v2004-20220901-en
General
-
Target
fb4c2e3c63c09c71f521025d18b894413179c9a24070571246798e0fd3a04762
-
Size
204KB
-
MD5
5a0ddb5ae0280512cf20c1952beea28b
-
SHA1
f4b919df845a4613b2578c2b35fc9bca7e5d0e09
-
SHA256
fb4c2e3c63c09c71f521025d18b894413179c9a24070571246798e0fd3a04762
-
SHA512
a8148d0eef77e3c036ef1c7dd5afefec63681bfbb64c388484b72b44c61080b16cec8a25a491a8bf792caf616f91e6dcac1c3402ccf1cef611aded58fec9e7cf
-
SSDEEP
3072:l2OMw5EwCB8qKQt/Co3Z01Y+f7XJ3ZRACQh0GfCq3tjuZVkxT5hrcsEotax/RX8+:EOXZV486F05pRXGn9qZaFz+X1
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
fb4c2e3c63c09c71f521025d18b894413179c9a24070571246798e0fd3a04762.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Themida Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 854KB - Virtual size: 871KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE