Behavioral task
behavioral1
Sample
a9a5fd55da53435b30d4023e5225de2534ab3246a817f13d9432bb19fd963f41.exe
Resource
win7-20220812-en
General
-
Target
a9a5fd55da53435b30d4023e5225de2534ab3246a817f13d9432bb19fd963f41
-
Size
781KB
-
MD5
d48727b80839d610f8c36326c5229299
-
SHA1
bfd1b0e9ca7a6c29f3442a87f2c34a42a427a8fa
-
SHA256
a9a5fd55da53435b30d4023e5225de2534ab3246a817f13d9432bb19fd963f41
-
SHA512
99c77479dfe848df6b1e90b5c01a8e1bacf6d830910cfef0d2cf1f27c7d58cbd39c39211d0750652e6a8d79c87bd2d6cf2d7b8e99b05b2d25aa23f80284ddd92
-
SSDEEP
12288:V+tlzrOrzP9b3Mx0mWdBuVz/1jY1UHlPZOdDoXaIG8XNIUDLVZK37Au:ktlzrOrzV7y0mtz/1GDoaIG8XGsV/u
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a9a5fd55da53435b30d4023e5225de2534ab3246a817f13d9432bb19fd963f41.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 748KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE