Behavioral task
behavioral1
Sample
f135d50d0cdb6ff1e272f187e45b3a87948a96773427c85fa6f92f1d0347fc19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f135d50d0cdb6ff1e272f187e45b3a87948a96773427c85fa6f92f1d0347fc19.exe
Resource
win10v2004-20221111-en
General
-
Target
f135d50d0cdb6ff1e272f187e45b3a87948a96773427c85fa6f92f1d0347fc19
-
Size
649KB
-
MD5
9a1f04d641a2f6b3b3e5b62b841f2db1
-
SHA1
b05f23df673e633b7ef22ee521a9d6b59bfb6e9b
-
SHA256
f135d50d0cdb6ff1e272f187e45b3a87948a96773427c85fa6f92f1d0347fc19
-
SHA512
b46faf8f577e7a7ed121782362cd04bb42bb634f1ca8145e49bab63b164ff394b7719077a6bd2e09228e58fd29574b1c30f66dd7461439e5d19b7a824eecf7fd
-
SSDEEP
12288:qYSnDB3isoAh4qLno7i5TaT7vqBpzxn9d9YpSG5PwDSnCFeJY9rPtd/bS8WA6ERv:Un1p3oo2T7sxTGhwGCx9b/S8JT
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f135d50d0cdb6ff1e272f187e45b3a87948a96773427c85fa6f92f1d0347fc19.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 140KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE