Behavioral task
behavioral1
Sample
b130730937e7dd545562acde9c18ac155c93a2e7e6505a85a17682f814b6de79.exe
Resource
win7-20221111-en
General
-
Target
b130730937e7dd545562acde9c18ac155c93a2e7e6505a85a17682f814b6de79
-
Size
608KB
-
MD5
e047e0480e8640926a9963b318a56759
-
SHA1
bd55876455b82763e15d07da7e04855003071ee9
-
SHA256
b130730937e7dd545562acde9c18ac155c93a2e7e6505a85a17682f814b6de79
-
SHA512
71d9f52ad57ec1abea8a256eac9c0cf62790e7dcd1180b9d802db80227bad13dc43103364896d56ed70e97226d9d5ea70d3b8666269f562fc1885bee82c84d53
-
SSDEEP
12288:K12iwbB8fy1ENbiWrJoBvuk3P2YslRiURCQ5Lv/2HvVdbfV:zv86YbiikfolUK5iHp
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
b130730937e7dd545562acde9c18ac155c93a2e7e6505a85a17682f814b6de79.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 554KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE