Behavioral task
behavioral1
Sample
7828f95823a0a5c5d90f19162dee14ee8deaaaa3ca8e27bcdbe07cedb318ce43.exe
Resource
win7-20221111-en
General
-
Target
7828f95823a0a5c5d90f19162dee14ee8deaaaa3ca8e27bcdbe07cedb318ce43
-
Size
1.5MB
-
MD5
25ddecea373903e30cbfaef59562d6ce
-
SHA1
ff1fe5cfafc030a62df1bca8a20b59d57a7e8dc2
-
SHA256
7828f95823a0a5c5d90f19162dee14ee8deaaaa3ca8e27bcdbe07cedb318ce43
-
SHA512
b801307a94e880cc6a7974ebed8ad482a8ab6a31118c1e5c08b6dd5f785f23e543c0c0bb5192fab5bb17f694205f22482f576568942616ac9cf3987e2f439eac
-
SSDEEP
24576:2gtzxyA65kT+o/NQzGFuzUWZMSWn/5TfdG4yVNEW8gsdorQwPPweMhRGh0xz/CaY:289f/9eNW/5Tfk4GHrbdkuaW5
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
7828f95823a0a5c5d90f19162dee14ee8deaaaa3ca8e27bcdbe07cedb318ce43.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE