Behavioral task
behavioral1
Sample
898a031a675e02be438cc37df6299959172db92a62651adfde1f8d1682ae4de2.exe
Resource
win7-20220812-en
General
-
Target
898a031a675e02be438cc37df6299959172db92a62651adfde1f8d1682ae4de2
-
Size
710KB
-
MD5
5e4e0fb2daff92c826b9b8bbaa6ee8f7
-
SHA1
70c80403b7152bbd7f7f17ff5ba2e79d74c298f2
-
SHA256
898a031a675e02be438cc37df6299959172db92a62651adfde1f8d1682ae4de2
-
SHA512
69f541dda5f70ec5cd6beb39076e5ebb7d155f60e7774ad3afe514353e01204f695c98a25e85bf45434b3b62811ee5259434c4420768a41e94431421de9859a4
-
SSDEEP
12288:xl4BvWFFjITCr6Lw0w17ISaxevJ25HY9av2ESvVAe6sJwyTtxz6wo9yExTH3OR9:xyvWrjITQ6sSSaxevE5XqtxIyExTHeR
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
898a031a675e02be438cc37df6299959172db92a62651adfde1f8d1682ae4de2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 656KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE