Behavioral task
behavioral1
Sample
caee9db61573da4fe88d1bf650c5aa49e141d95b219f8327b50054d5f017368a.exe
Resource
win7-20220901-en
General
-
Target
caee9db61573da4fe88d1bf650c5aa49e141d95b219f8327b50054d5f017368a
-
Size
1.3MB
-
MD5
d7ceba62deb992a3821c12600d7c0842
-
SHA1
a7167d62e3d3bddd73aa745d49a83e2ee8263db5
-
SHA256
caee9db61573da4fe88d1bf650c5aa49e141d95b219f8327b50054d5f017368a
-
SHA512
c7ea876100ef61e94df892ec53f2ac0415ff1d2bcbfaf63e1fad2d3737e316a3ad68fef691eef9b21e39a86e420ec75456a2982daa06d38e551761ff61dcf8c6
-
SSDEEP
24576:kiW2d5bUKHdepiFqRQfyN0Zk0cU7F1/Si19U1VrcYB36eKazyqzUke:o2fCp/zGidU7DSd4YKnUUke
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
caee9db61573da4fe88d1bf650c5aa49e141d95b219f8327b50054d5f017368a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE