Behavioral task
behavioral1
Sample
fc3b1be125e09efa6f74254124c3e81d322f8afde74ecc3fb290b532c6a47983.exe
Resource
win7-20220812-en
General
-
Target
fc3b1be125e09efa6f74254124c3e81d322f8afde74ecc3fb290b532c6a47983
-
Size
3.5MB
-
MD5
a8b2f6be72447b100fdf4fa2fe948da9
-
SHA1
bf2f90e447f933784be96c9d88908be7e6496295
-
SHA256
fc3b1be125e09efa6f74254124c3e81d322f8afde74ecc3fb290b532c6a47983
-
SHA512
0f2734af61fbde4afa9031568cf11a30d5a9e79a1b38d3d7192d5f4528d5acd37640be685363b0ac80900b8f7790af6fdb5f2a95afa485b096e513d889968e85
-
SSDEEP
98304:z4Y9FkCzT2boJkA7GQqT5br21vJcye6Z/Iij:htJaACQqNbrGBcyL/7j
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
fc3b1be125e09efa6f74254124c3e81d322f8afde74ecc3fb290b532c6a47983.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 632KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE