Behavioral task
behavioral1
Sample
f8715d2ec3e1eb0b9c55c8558dd0207ab9e9e27d8e10b3c576e3548737c36936.dll
Resource
win7-20221111-en
General
-
Target
f8715d2ec3e1eb0b9c55c8558dd0207ab9e9e27d8e10b3c576e3548737c36936
-
Size
654KB
-
MD5
62afe02d0e6cb7406af29ddbf5dcaa03
-
SHA1
f1520b6000ad1f5196b3b9ae40f82bd9f618f1ac
-
SHA256
f8715d2ec3e1eb0b9c55c8558dd0207ab9e9e27d8e10b3c576e3548737c36936
-
SHA512
792ffc491488d7359d9f4324c513f48e280f365263fe2013faa2d0242e3674dc33b32dbcd9ceb927561736e131c70d47849d3cf9e76cdbed59b3cff61a528926
-
SSDEEP
12288:7cKkQ4/IZhWBfLt9Ew/7u/Vmg1GOKuR4OGqqvLIFE7c8QXOhfd:7tNxhWBDtySu/Vmg151VqvL7QX
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f8715d2ec3e1eb0b9c55c8558dd0207ab9e9e27d8e10b3c576e3548737c36936.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 23KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 626KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE