Behavioral task
behavioral1
Sample
9d94a6567aba564f71e9c772ed1cd9f9049becbe3c199294b124d6b636eee1f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d94a6567aba564f71e9c772ed1cd9f9049becbe3c199294b124d6b636eee1f2.exe
Resource
win10v2004-20221111-en
General
-
Target
9d94a6567aba564f71e9c772ed1cd9f9049becbe3c199294b124d6b636eee1f2
-
Size
488KB
-
MD5
23221a190bdd75aacec7b8521df5c2b0
-
SHA1
47a94daebbdaf1bb1ecee16845cb4e1116d8a0d5
-
SHA256
9d94a6567aba564f71e9c772ed1cd9f9049becbe3c199294b124d6b636eee1f2
-
SHA512
e1ed733e0c9c9bb66f6eb897835f3fcd285d6e6ce7669ada98af2f53eaaadc39bf4060fbc5124a22498eebcf6d9eebb3e3db98ea042ef9259ad5d711a8250752
-
SSDEEP
12288:p46SDX7vQHuii8AEbkQWq9cpRAjjgsvbKFWFk7Mghrl9VMu:NSDrIHBBbbVvckjjgsvpFy5fMu
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
9d94a6567aba564f71e9c772ed1cd9f9049becbe3c199294b124d6b636eee1f2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 442KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE