Behavioral task
behavioral1
Sample
39b8b88f4941b0a258ada4a212697c410c049d3f73aba78bb4e0784b78ad4a65.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
39b8b88f4941b0a258ada4a212697c410c049d3f73aba78bb4e0784b78ad4a65.exe
Resource
win10v2004-20221111-en
General
-
Target
39b8b88f4941b0a258ada4a212697c410c049d3f73aba78bb4e0784b78ad4a65
-
Size
1.3MB
-
MD5
38770f3c0af1cf823721478ef46004ea
-
SHA1
3d53ce607ae4ab177a1baff6ec4d50ec2e24e0ed
-
SHA256
39b8b88f4941b0a258ada4a212697c410c049d3f73aba78bb4e0784b78ad4a65
-
SHA512
dc512a611131134ae31380aeee9e814fe72bef78200de708f3250cc078cfeb07af8fb748800c007ff79f94927d487f58ebcf74f62865c20b73f85f6dd7e8e778
-
SSDEEP
24576:rouAwHX3eYKIhmlR0IUQ6cL3uYECR/T2yYQcsp5QhRM9m5o3cWVssswE2LAx:riwHeJIvILLFr/6FQ1eRemVUswax
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
39b8b88f4941b0a258ada4a212697c410c049d3f73aba78bb4e0784b78ad4a65.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 332KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE