Behavioral task
behavioral1
Sample
cd5f1de07fa3c48ea15759378bb18d170245dd27b11246197716e645cb87514d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cd5f1de07fa3c48ea15759378bb18d170245dd27b11246197716e645cb87514d.exe
Resource
win10v2004-20220812-en
General
-
Target
cd5f1de07fa3c48ea15759378bb18d170245dd27b11246197716e645cb87514d
-
Size
1.4MB
-
MD5
739e552aca8b6afb6e20c461ca9deba3
-
SHA1
c63faaf663bee1da698bc57f0c18026ccbf30b64
-
SHA256
cd5f1de07fa3c48ea15759378bb18d170245dd27b11246197716e645cb87514d
-
SHA512
78bdbedceaabaa3689a9e09e712e4e665dcacdb58925cff252bfc6fdbd1c4070308082507a7cb45ce540c59ee907c0a3155298d8fdc0e07fbd6f5221cc1d80ac
-
SSDEEP
24576:gp+exNHsFmdImlhY7la+CJdPKH69PyxNHH+hxrKBOKPwhYi2qAhG9ktCgLsRD:gDxNYmplFdPqC+5H+hteO0whYifAE9sO
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
cd5f1de07fa3c48ea15759378bb18d170245dd27b11246197716e645cb87514d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE