Behavioral task
behavioral1
Sample
3598ea25b58b8dd18252858840ac6b9c38ea626092852d7cb4f46516f7dee525.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3598ea25b58b8dd18252858840ac6b9c38ea626092852d7cb4f46516f7dee525.exe
Resource
win10v2004-20220812-en
General
-
Target
3598ea25b58b8dd18252858840ac6b9c38ea626092852d7cb4f46516f7dee525
-
Size
208KB
-
MD5
a6549c320f4ef47a247c9f4b9290fe35
-
SHA1
cddeb8277b0653da5b721b712e0678e02faa495d
-
SHA256
3598ea25b58b8dd18252858840ac6b9c38ea626092852d7cb4f46516f7dee525
-
SHA512
d7824cd2609238162b93cff09cc96dd3ef49af9dd97c72790d2f06df5010f118cb75609221c8389056e7c8839258f0a750e2e65543a6436152f0f90cf074c719
-
SSDEEP
6144:u//USrIhsDlXmaPkDHnq44xk9Fhy+A7dQ9Kai/:unTUW54Hn0xeewN0
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
3598ea25b58b8dd18252858840ac6b9c38ea626092852d7cb4f46516f7dee525.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 193KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE