Behavioral task
behavioral1
Sample
916f3bc84d205ea3da0c94725921d9228a6947f1a3c097ff2d2a4d1f3a14b29b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
916f3bc84d205ea3da0c94725921d9228a6947f1a3c097ff2d2a4d1f3a14b29b.exe
Resource
win10v2004-20221111-en
General
-
Target
916f3bc84d205ea3da0c94725921d9228a6947f1a3c097ff2d2a4d1f3a14b29b
-
Size
1004KB
-
MD5
2c15eeae0bd2100fbb1b4ce7a1148cec
-
SHA1
c5475bd349b901686f711d9b2e8590fb1b3191a3
-
SHA256
916f3bc84d205ea3da0c94725921d9228a6947f1a3c097ff2d2a4d1f3a14b29b
-
SHA512
9771a5cadb29167b99cc636d276a845ed053a51482f6ff04004d7ee8def526d66a620a432ad9f5032993e7810deef42f587a2f8557beb1762e67209949dab5de
-
SSDEEP
24576:2dc7C7ZqnBPXChw7GyobsYQvWKkRJuml4dc:H7C7ZqR5MgL6bQ
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
916f3bc84d205ea3da0c94725921d9228a6947f1a3c097ff2d2a4d1f3a14b29b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 14KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 986KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE