Behavioral task
behavioral1
Sample
13779aca73ceaa020ac97230527ae7c223dbd2d585a25f88c70bc72b5a5f0a12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13779aca73ceaa020ac97230527ae7c223dbd2d585a25f88c70bc72b5a5f0a12.exe
Resource
win10v2004-20220812-en
General
-
Target
13779aca73ceaa020ac97230527ae7c223dbd2d585a25f88c70bc72b5a5f0a12
-
Size
157KB
-
MD5
b0c040c363718a95f35c15b10962c51c
-
SHA1
c718fd6bbb037f42e798b8fdc1377dbaad113587
-
SHA256
13779aca73ceaa020ac97230527ae7c223dbd2d585a25f88c70bc72b5a5f0a12
-
SHA512
45f423a43a64d0601769ecec5b9c9a5044cb3ce7ee8121754dd99addf7399c38226d1c9a76efe60a235b083abbcac33588dd89d4ccdb1c9a2e56eee9afece739
-
SSDEEP
3072:gzFHgB1A3c4qK4yWH67kaazzl9hcJxDkRbCYMrM63VuWQy:gKY37qHyWIYzyJeREo4Vp
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
13779aca73ceaa020ac97230527ae7c223dbd2d585a25f88c70bc72b5a5f0a12.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE