Behavioral task
behavioral1
Sample
c00eb7179c2768ca386bf27b1074f2772f48cb91f8e703adbca16fc14e394138.exe
Resource
win7-20220812-en
General
-
Target
c00eb7179c2768ca386bf27b1074f2772f48cb91f8e703adbca16fc14e394138
-
Size
2.0MB
-
MD5
0a5d7da61c92f4ee0ec880aa569da808
-
SHA1
eed014d7f6e41e2670a8f8bb158c1a470420a710
-
SHA256
c00eb7179c2768ca386bf27b1074f2772f48cb91f8e703adbca16fc14e394138
-
SHA512
4893c5d89c3e855fefe0dc0accdd918bffe8b8e366af3cf0eaa9576c63274c6113d8391bfa26e17c2d45441a18002bd7bc76d725cf2baf5c965adf0ef34391ea
-
SSDEEP
24576:ooz5LiyU7VcqX4e7Y8P0C8OVqBl3jZKCKaPLY0hjZ7daY/PtWzni+Pu1WF07Ztqb:/hi5eqX4e0SiOwpvJzsWIoTFkMsBX
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
c00eb7179c2768ca386bf27b1074f2772f48cb91f8e703adbca16fc14e394138.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 192KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.8MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE