Behavioral task
behavioral1
Sample
6c5eb737bf0e702eb34d08e149525f86e412012f08af6de76a763f08ec5e61bd.exe
Resource
win7-20221111-en
General
-
Target
6c5eb737bf0e702eb34d08e149525f86e412012f08af6de76a763f08ec5e61bd
-
Size
2.3MB
-
MD5
0cc5457fc41c04c83b968469a1fb5496
-
SHA1
1077e8f47423749b37140bcaec173c124a779d84
-
SHA256
6c5eb737bf0e702eb34d08e149525f86e412012f08af6de76a763f08ec5e61bd
-
SHA512
8fbd2f2e4d1bc09da24b3a79c7ca15df3dd92e89d564b62c6dda57899384c5caacc2674456e3ffdd39d4e887d5aadead630474d5ec64cfc8856fc34a58e44505
-
SSDEEP
49152:hs+Fe4xhC7niS/YlFPMGmscfSeVLLdWqpDgx7:hs+F5ssFEGnpeVHdTpD8
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
6c5eb737bf0e702eb34d08e149525f86e412012f08af6de76a763f08ec5e61bd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE