Behavioral task
behavioral1
Sample
ca1eb8cc5d54ce5a5c8c048992340e31d055c7fa6397aa24d83402591db97b07.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ca1eb8cc5d54ce5a5c8c048992340e31d055c7fa6397aa24d83402591db97b07.exe
Resource
win10v2004-20221111-en
General
-
Target
ca1eb8cc5d54ce5a5c8c048992340e31d055c7fa6397aa24d83402591db97b07
-
Size
2.1MB
-
MD5
807ca22870f17575bdd873c9abc22e60
-
SHA1
170cd8097d8c8daa1644dbed067a50b3a7bf33fe
-
SHA256
ca1eb8cc5d54ce5a5c8c048992340e31d055c7fa6397aa24d83402591db97b07
-
SHA512
1cdb52b21e556c89590d2a8b19aec41b68deec9a3d596c22c281f22366752c1d1da2e54535806651fbc32e30a3ea5b901d48dd9f19d0414ff08bc61ec23568c6
-
SSDEEP
49152:OlwnnSYtRNyfeWqEPzSaCdHAR58cNO0s8pgzuv5PcxKyVKGdBx:OejtRNyDPOaCo8cAR8ez85ExKyVtZ
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ca1eb8cc5d54ce5a5c8c048992340e31d055c7fa6397aa24d83402591db97b07.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snake Size: 276KB - Virtual size: 276KB
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE