Behavioral task
behavioral1
Sample
eda5f691f7a517f36a199b68db55af86ae9866f8014b7ccb39b40d7234bdbe53.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eda5f691f7a517f36a199b68db55af86ae9866f8014b7ccb39b40d7234bdbe53.exe
Resource
win10v2004-20220812-en
General
-
Target
eda5f691f7a517f36a199b68db55af86ae9866f8014b7ccb39b40d7234bdbe53
-
Size
772KB
-
MD5
280dff1c24f2ced919d37f0bada675c6
-
SHA1
ecae55ea71d601d22fefdcac808bf2c5f288ed2f
-
SHA256
eda5f691f7a517f36a199b68db55af86ae9866f8014b7ccb39b40d7234bdbe53
-
SHA512
3f8df5c029913f636fd3b22d779f24007572da7aeb5bbe87b212e048e20c7510c45de7bd8622807400d9436caed2e044e6d46f3211b9980210df8a1974b9f64f
-
SSDEEP
12288:GnW9vP3bh1kBaVbb71F2gKyWuQJ2simi5vO45gBfprP+atqo/ebYNyzdapb+khMP:F9vPrhrv1NuuF5Ch+iqoebDz3x8aH
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
eda5f691f7a517f36a199b68db55af86ae9866f8014b7ccb39b40d7234bdbe53.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 68KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 688KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE