Behavioral task
behavioral1
Sample
8c6678f5afd6e8d31358b9cdcfc9c546ce354db87fac9746574337ff2bf96460.exe
Resource
win7-20221111-en
General
-
Target
8c6678f5afd6e8d31358b9cdcfc9c546ce354db87fac9746574337ff2bf96460
-
Size
724KB
-
MD5
6ccbf5ae65820d983f8222622df8ad99
-
SHA1
613a1c0d9e124832040e4271609cacc284653c18
-
SHA256
8c6678f5afd6e8d31358b9cdcfc9c546ce354db87fac9746574337ff2bf96460
-
SHA512
ec26a2f887dd4b4d49bc5c682c31ee5840e173089966ffaf77331c7f3b343867becfae9a8da3217a62d18c452bc6d9a38936bc2a75cae2d2b988edb42cf3fe63
-
SSDEEP
12288:gZl/DmMzSGxL7zz1xK0xO4xVwtPhuG8yBbFtpnfCV3g:gD/KM/xL7X20FxytF86Jtdf6g
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
8c6678f5afd6e8d31358b9cdcfc9c546ce354db87fac9746574337ff2bf96460.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 707KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE