Behavioral task
behavioral1
Sample
07e39ba7f494315b3e3192f3fc12e6a12f24ad5259798bc2362c0bd156fbdb86.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
07e39ba7f494315b3e3192f3fc12e6a12f24ad5259798bc2362c0bd156fbdb86.dll
Resource
win10v2004-20220901-en
General
-
Target
07e39ba7f494315b3e3192f3fc12e6a12f24ad5259798bc2362c0bd156fbdb86
-
Size
191KB
-
MD5
fba9267bc5d923dfaebae1b9957dd4a1
-
SHA1
825ddc9838b6c8ee927936e4ad132914f0671836
-
SHA256
07e39ba7f494315b3e3192f3fc12e6a12f24ad5259798bc2362c0bd156fbdb86
-
SHA512
601774d3d027e7301927000ff921740726a2d4e3c847bbc9c33a3a893f70d8b0a925127a7a5f425b1c96b835e485c96a5408879a92787ca2b02600a4140c6b68
-
SSDEEP
3072:l2OMw5EwCB8qKQt/Co3Z01Y+f7XJ3ZRACQh0GfCq3tjuZVkxT5hrcsEotax/I:EOXZV486F05pRXGn9qZaFzz
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
07e39ba7f494315b3e3192f3fc12e6a12f24ad5259798bc2362c0bd156fbdb86.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Themida Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 854KB - Virtual size: 871KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE