Behavioral task
behavioral1
Sample
4bf6d533c0cd43ad733048b4ed4d5a3e4a6582975906aaa1112840c03e39d519.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4bf6d533c0cd43ad733048b4ed4d5a3e4a6582975906aaa1112840c03e39d519.exe
Resource
win10v2004-20220812-en
General
-
Target
4bf6d533c0cd43ad733048b4ed4d5a3e4a6582975906aaa1112840c03e39d519
-
Size
1.8MB
-
MD5
e8be266bc32aef5d862afff0ca0cf21b
-
SHA1
0e1ee010c048c788183ab592c216d647d376ad05
-
SHA256
4bf6d533c0cd43ad733048b4ed4d5a3e4a6582975906aaa1112840c03e39d519
-
SHA512
02c482812451bbc0e6aa80bc502781729c30baabe0fa8656724652eab0b25a94469792e89b8dc20021aa936b850757bd0ea57126ba0027ea1d2765b2c29fc7c0
-
SSDEEP
24576:Jm7BblVMvJHWlgAXWhXi5vCoUvrMat9+smjOy4Q7uHK6fFC5iJl6sRPLOGvsl1/:Jmls2CA0X+vXe/y4QiJfLFvY1/S0A5
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
4bf6d533c0cd43ad733048b4ed4d5a3e4a6582975906aaa1112840c03e39d519.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 144KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 468KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE