Behavioral task
behavioral1
Sample
4a17903fa92829599acfa7c43e1fc8d6092665287f119bcc22f6762c0f7622d1.exe
Resource
win7-20221111-en
General
-
Target
4a17903fa92829599acfa7c43e1fc8d6092665287f119bcc22f6762c0f7622d1
-
Size
3.0MB
-
MD5
7d4ddc7fa02bd0c1d15a2ef58cb7fb3f
-
SHA1
338dc38f30143025861658a3fb37ead28f27a49f
-
SHA256
4a17903fa92829599acfa7c43e1fc8d6092665287f119bcc22f6762c0f7622d1
-
SHA512
09afbdf6448d98222c82a37346458f9ecae428e40b594b1ca834a75e955b2888a4a6900d4827a997b70880e137d8e5a62ca9cdefe627a3d4acf0caac520f1727
-
SSDEEP
49152:a6TbCaw1qXa3mrm8HTIW2e9Ul5R/9yDYiKgdv5I5AliPIQTSElI7:a6TbCanXwmZHs3rh0F157irD6
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
4a17903fa92829599acfa7c43e1fc8d6092665287f119bcc22f6762c0f7622d1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 352KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 444KB - Virtual size: 779KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.2MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE