Behavioral task
behavioral1
Sample
b0ee3ab1e0830ad216bb0316595badd82e3960ce0d27fe2220ca1f6c97b42231.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0ee3ab1e0830ad216bb0316595badd82e3960ce0d27fe2220ca1f6c97b42231.dll
Resource
win10v2004-20220812-en
General
-
Target
b0ee3ab1e0830ad216bb0316595badd82e3960ce0d27fe2220ca1f6c97b42231
-
Size
553KB
-
MD5
a212c54afdbac77537dca140705fd930
-
SHA1
d323b2304d43b7fe47cf24a67e3ce19f8091c696
-
SHA256
b0ee3ab1e0830ad216bb0316595badd82e3960ce0d27fe2220ca1f6c97b42231
-
SHA512
a786d052c46a4aebfb54a069538974384365645ad8cf7ceeb8b357f976b4bed98cb0ba2bbdf970121cae9671913ded15bc060052bf82e6a7adb498a79b1ef1e0
-
SSDEEP
12288:8ANl3J+ZeAt+9mrdpAGZp0X+S0OIcAk57vIRGzn3Q71KpG:8YbAt+EX2X+0IcF57AEzng7
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
b0ee3ab1e0830ad216bb0316595badd82e3960ce0d27fe2220ca1f6c97b42231.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 535KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE