Behavioral task
behavioral1
Sample
9930e4ae909af9bb2ed99750589b5d78be8d67798d330ed7891308dc85909675.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9930e4ae909af9bb2ed99750589b5d78be8d67798d330ed7891308dc85909675.exe
Resource
win10v2004-20221111-en
General
-
Target
9930e4ae909af9bb2ed99750589b5d78be8d67798d330ed7891308dc85909675
-
Size
940KB
-
MD5
7732ff8dcea9fd4db73e965856b7f2d0
-
SHA1
4df4c9f74f9ff86119029f7a9e52a162e6194070
-
SHA256
9930e4ae909af9bb2ed99750589b5d78be8d67798d330ed7891308dc85909675
-
SHA512
1b1885633761de3d4a16ff0db4a447ec39308438908644bb521da59cbd54bbc91c3a1f412e214dee510e8d20d98118c43a31cf705c1e00537e3537b58a46b933
-
SSDEEP
24576:3kCQA33ZIQYddkxv2SUrqQO+8RKV7fNKebu/e:3kpjpg2o+ZHKeb
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
9930e4ae909af9bb2ed99750589b5d78be8d67798d330ed7891308dc85909675.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 554KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE