Behavioral task
behavioral1
Sample
f4b40db2218e9b05fa69a2f470c499c5431975c177b85ff7e53a9b4134781896.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f4b40db2218e9b05fa69a2f470c499c5431975c177b85ff7e53a9b4134781896.exe
Resource
win10v2004-20221111-en
General
-
Target
f4b40db2218e9b05fa69a2f470c499c5431975c177b85ff7e53a9b4134781896
-
Size
1.2MB
-
MD5
1bb6c920bb02b331d4a32f8970d8e63b
-
SHA1
82fb1a1d9c00d69a56b27dc1eb1116a8d4780bd5
-
SHA256
f4b40db2218e9b05fa69a2f470c499c5431975c177b85ff7e53a9b4134781896
-
SHA512
2ee114c16526e0d2aa06fbd7407507c574f07b8dfe00368d2097d0fb98d18277cfd1e5378f71ecfb6b19ade6803c51e501018f1276bd9e804808c68aeb298bc3
-
SSDEEP
24576:zNs5TY4OSoOCh2CMLlTFk3NIa2rHuj+m0G:zAM4OpQLBFAaayHujZd
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f4b40db2218e9b05fa69a2f470c499c5431975c177b85ff7e53a9b4134781896.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE