Behavioral task
behavioral1
Sample
c9cbdf49d93d86aba5ba9bdaeba30d98e44cc006134d3fa0c674f3f2a0dd6bb3.exe
Resource
win7-20220812-en
General
-
Target
c9cbdf49d93d86aba5ba9bdaeba30d98e44cc006134d3fa0c674f3f2a0dd6bb3
-
Size
630KB
-
MD5
5afb82aa6b66a57284ed9e54fea5673c
-
SHA1
9bec5fdb2a8672f04f219f852fed0bdd07886bc8
-
SHA256
c9cbdf49d93d86aba5ba9bdaeba30d98e44cc006134d3fa0c674f3f2a0dd6bb3
-
SHA512
a374e267fe78e287799caa55b3bf25c3f95f8334d9de4201de7cb7e582774b83f564e94295167a99134c33577d052c30087e24810e8fb220786e33c38d2304ec
-
SSDEEP
12288:EIrxUtTiHLb9iQiMAuyiZd9NIV0ENvNKpiIuatpLruGio7klypZ0buwWMQ:AtuHdYuyiZdgV3Zza3hiowlycRHQ
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
c9cbdf49d93d86aba5ba9bdaeba30d98e44cc006134d3fa0c674f3f2a0dd6bb3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 577KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE