Behavioral task
behavioral1
Sample
9041770f9f57fe0e14c779c636b7095add809c72986dd1f5d7957d7b68b9a70c.dll
Resource
win7-20221111-en
General
-
Target
9041770f9f57fe0e14c779c636b7095add809c72986dd1f5d7957d7b68b9a70c
-
Size
733KB
-
MD5
408e4e507ee7adfd65dcdd3ccf983760
-
SHA1
c0938c5e8b31ef9f2b22129a41d24e213cccb301
-
SHA256
9041770f9f57fe0e14c779c636b7095add809c72986dd1f5d7957d7b68b9a70c
-
SHA512
edb79a8fa51f3466287808c3d3e74744d63e52c41d75936a2fe82b7dbced6fd17015e0f323401e7d792f5a8307930ea5963f1b62e73606086a3d6b45bf529103
-
SSDEEP
12288:IJq2CRci32wuyt9+dkY2RkMmtd+UovZ4JLBbfo6XAHpvAIDxYQBsRcJ:aq2CRz3Djt0V270do4B0/ATU/J
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
9041770f9f57fe0e14c779c636b7095add809c72986dd1f5d7957d7b68b9a70c.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 136KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 592KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE