Behavioral task
behavioral1
Sample
e46e0dd53a56b26b30cd674e28fab631dd4048420a85badae1a1ec7c8d596bea.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e46e0dd53a56b26b30cd674e28fab631dd4048420a85badae1a1ec7c8d596bea.exe
Resource
win10v2004-20220901-en
General
-
Target
e46e0dd53a56b26b30cd674e28fab631dd4048420a85badae1a1ec7c8d596bea
-
Size
525KB
-
MD5
7938e53a605ac6fef44f3ae81a1267f9
-
SHA1
e321d29dcf6546167dd2be7b31666621a6470a8e
-
SHA256
e46e0dd53a56b26b30cd674e28fab631dd4048420a85badae1a1ec7c8d596bea
-
SHA512
3492ba5b2d3f293c0166cda44822f3b5efbe25db90dbc53703e2c65d499f5aa788d7c1ac92fedaa588a771c4896ce3485256be5c0ddadcb571a80137281daca3
-
SSDEEP
12288:Y7LIP1ppiDhUzRENYULXehwDwxoovfGxFH8tC1qHbBTIMciS:JGDezRE3LXeuDwx9v+xFH8AcHbNIMciS
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
e46e0dd53a56b26b30cd674e28fab631dd4048420a85badae1a1ec7c8d596bea.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 253KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 432KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE