Behavioral task
behavioral1
Sample
cb4d7d1a923685fe43809c8b055df66d2679ee08bbda80a8a643a8d5bc2d6af3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb4d7d1a923685fe43809c8b055df66d2679ee08bbda80a8a643a8d5bc2d6af3.exe
Resource
win10v2004-20220901-en
General
-
Target
cb4d7d1a923685fe43809c8b055df66d2679ee08bbda80a8a643a8d5bc2d6af3
-
Size
1.6MB
-
MD5
9bcbf9a4c94be69c783bbf72feab0425
-
SHA1
b641f38fa536b7efa6c6dcae023da223f862903c
-
SHA256
cb4d7d1a923685fe43809c8b055df66d2679ee08bbda80a8a643a8d5bc2d6af3
-
SHA512
8c742cc4479d07687a64bb7b5e090d520327e776a90a48d4fa9c2326ba3d4bae504b40d93dd96d4ccc3b0a8885e827019304ed76497f02abb28096b549d3a2d7
-
SSDEEP
24576:ptusWi8YJ7ubr3/PlGF4yxGOzSHpAonLIq++/y1h7XfiPo41D2BsvWx6lGfhPeRC:pbWin7InAF4yxrzSKonLIR1WovwsSbw
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
cb4d7d1a923685fe43809c8b055df66d2679ee08bbda80a8a643a8d5bc2d6af3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 376KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 762KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE