Behavioral task
behavioral1
Sample
a0f8cee7ab5869876c971707ace4bf9036b554b00ecbe3e9d56c5cb4da6fc8f6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0f8cee7ab5869876c971707ace4bf9036b554b00ecbe3e9d56c5cb4da6fc8f6.exe
Resource
win10v2004-20221111-en
General
-
Target
a0f8cee7ab5869876c971707ace4bf9036b554b00ecbe3e9d56c5cb4da6fc8f6
-
Size
206KB
-
MD5
e7e804839d4da10f9dd907f4e1fea867
-
SHA1
7a331f3ff8852e8c4dd033c7773ad532f9e28f12
-
SHA256
a0f8cee7ab5869876c971707ace4bf9036b554b00ecbe3e9d56c5cb4da6fc8f6
-
SHA512
1d9aa3e72b79152f64e76ed36be09e6576613ec92cd05fb327326c6076f1ea32004f2a78a884168e45f3091f5771ee0be38ea4e016270af91b84260b02b452c6
-
SSDEEP
6144:J0Elsh7URnF6Hx+aeLmxtoUh1837mM0qRDZrJopQp:zk7URF6RrMq+007mxS5Wpq
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a0f8cee7ab5869876c971707ace4bf9036b554b00ecbe3e9d56c5cb4da6fc8f6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 193KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE