Behavioral task
behavioral1
Sample
cd23c1cb5093ece5aec3eb8c70144059095276f180a0eefa48710f12796952e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd23c1cb5093ece5aec3eb8c70144059095276f180a0eefa48710f12796952e4.exe
Resource
win10v2004-20221111-en
General
-
Target
cd23c1cb5093ece5aec3eb8c70144059095276f180a0eefa48710f12796952e4
-
Size
67KB
-
MD5
4995ae7aae99383ec66887d484ce1b95
-
SHA1
a93a5640b50b3bec8052d8679349a528a429f2fc
-
SHA256
cd23c1cb5093ece5aec3eb8c70144059095276f180a0eefa48710f12796952e4
-
SHA512
e35327d16365cad33a7179e02488712d906d9bd9e5506c762695c95be744d2303660995aadcae123ec2f2265a77dacf57ff9bc231fe8e7045cf19d982c07325d
-
SSDEEP
768:PRJcaIg4saK6l1N4ySwOfu2y2e+NhXw+OR+Rx+YkbTJCrNET5:PRJ+kDfugG+XkblCG
Malware Config
Signatures
-
Processes:
resource yara_rule sample themida
Files
-
cd23c1cb5093ece5aec3eb8c70144059095276f180a0eefa48710f12796952e4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE