Behavioral task
behavioral1
Sample
d3ac9a88bc11f753a45cfbccfd042b0c47951ed19202bd0b858d970a2f74ab85.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d3ac9a88bc11f753a45cfbccfd042b0c47951ed19202bd0b858d970a2f74ab85.exe
Resource
win10v2004-20220812-en
General
-
Target
d3ac9a88bc11f753a45cfbccfd042b0c47951ed19202bd0b858d970a2f74ab85
-
Size
1.5MB
-
MD5
88dcfe111c02dd874b7e15a175e37145
-
SHA1
aa52c3f2c6c1a76b6b2b5667153ea4b89e42d18c
-
SHA256
d3ac9a88bc11f753a45cfbccfd042b0c47951ed19202bd0b858d970a2f74ab85
-
SHA512
e25255fd99e4d233f620990ee140bb7af05f50b932b1aabda0af8f22a948321c9e3f809bae7def1a69053c9a8b77d47707ed6e49be07d660b2b1de4587572b5d
-
SSDEEP
24576:1JktExBDANABj9gXKzD7qpL2GDhk5lWpmh3f1t6t3UPVezoYT+iKNNvut8SS55cv:XknAFq6n7wv1QlWpm9fL6HoYSiK3Gt8u
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
d3ac9a88bc11f753a45cfbccfd042b0c47951ed19202bd0b858d970a2f74ab85.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE