Behavioral task
behavioral1
Sample
63c411060dfaf94548ec52db6f69ded1c010dd01def6c2897f2f5ce1c8bf07e9.dll
Resource
win7-20220812-en
General
-
Target
63c411060dfaf94548ec52db6f69ded1c010dd01def6c2897f2f5ce1c8bf07e9
-
Size
719KB
-
MD5
74695ae62b9771e47bcb1c53c278f7d2
-
SHA1
5f6bc08f9bbbd622a8baa6f6719559aecf9751aa
-
SHA256
63c411060dfaf94548ec52db6f69ded1c010dd01def6c2897f2f5ce1c8bf07e9
-
SHA512
c92b29fbe6dbb64f6fe0eb8f8333dd23de79a19a420821bfa18c2f665102aceb7d9409f1de7131784362372a3a1fb3a8ba8fdfaf6bf8dd64296fabd1630bb2ea
-
SSDEEP
12288:XjaoJgeZYgUm+QoRGzNMXAAFu9GTZXc8Fhex0aM15LmA4PSxDFLuXdp5PLT7ce:XmUJZYygRGhde2OtFheyaMjLm4FUXdpR
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
63c411060dfaf94548ec52db6f69ded1c010dd01def6c2897f2f5ce1c8bf07e9.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 90KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 624KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE