Behavioral task
behavioral1
Sample
f88f19ccebe4f42ec563e9edd43626e63c5ea9167d6726f87170531f0ecff2b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f88f19ccebe4f42ec563e9edd43626e63c5ea9167d6726f87170531f0ecff2b3.exe
Resource
win10v2004-20220812-en
General
-
Target
f88f19ccebe4f42ec563e9edd43626e63c5ea9167d6726f87170531f0ecff2b3
-
Size
887KB
-
MD5
a8daa337a40cd16f21f774cee5006c74
-
SHA1
850a1198b6559210b859f0063930063f2da47fe2
-
SHA256
f88f19ccebe4f42ec563e9edd43626e63c5ea9167d6726f87170531f0ecff2b3
-
SHA512
f3dd560efd8ecc9936dbd3ee08403157bcc19495bf217fd59b2c8698767cc3209eed5fd5a56fb2f80e5d0cb0e37ba16a70c77fa37157964f173690476de39259
-
SSDEEP
12288:bD2pGY0IEM9vT7IGhxwEtyfoqO6KmOM5vS5ZATjM8KlX1xjTo5/WOzZYfOzLpCOr:bapP5vfpnq/vNa78Kp7ToFWnfKQ7i7
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f88f19ccebe4f42ec563e9edd43626e63c5ea9167d6726f87170531f0ecff2b3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 287KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE