Behavioral task
behavioral1
Sample
842479ddae2c8835705151f80630d550b32b5fce966006e5e4eef263d0cf0d9a.exe
Resource
win7-20220812-en
General
-
Target
842479ddae2c8835705151f80630d550b32b5fce966006e5e4eef263d0cf0d9a
-
Size
1.1MB
-
MD5
e4f300ad75832f38a7a2bdf427e98768
-
SHA1
00ea2343a43b0683780a64e796395fb19bb06fe4
-
SHA256
842479ddae2c8835705151f80630d550b32b5fce966006e5e4eef263d0cf0d9a
-
SHA512
a27acfd54f49c887c0c3c3342b11ee4e60a4a55ae61ab85ccd4a75dac4bd14e368a5de88a9822a7e2b6480c19016f67caa5e8ae1abf57848de92c310f5d6b9c7
-
SSDEEP
24576:Xh4k9mTGD1gVT5E6+5QFi6V296P1rgbCjava/9iGIomd:XUqs4QIQKbMFtIo2
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
842479ddae2c8835705151f80630d550b32b5fce966006e5e4eef263d0cf0d9a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 200KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 772KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE