Behavioral task
behavioral1
Sample
df53c37b9ad5841d16c737bf391c8c4145a4a5bfa0a86a09599b967a06f04743.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
df53c37b9ad5841d16c737bf391c8c4145a4a5bfa0a86a09599b967a06f04743.exe
Resource
win10v2004-20220901-en
General
-
Target
df53c37b9ad5841d16c737bf391c8c4145a4a5bfa0a86a09599b967a06f04743
-
Size
76KB
-
MD5
88bd9a0e6e54f43f9205f823e568cdef
-
SHA1
e1c6a27c040ea5454be20a56208f19e5b38017b1
-
SHA256
df53c37b9ad5841d16c737bf391c8c4145a4a5bfa0a86a09599b967a06f04743
-
SHA512
de1c9f88eaf18b4759f52cd132efd62b03684182cec2b2ae795d86672045f6814e726a998ff6b91d8f1057a0267528525939c723d164acbd49f46e706a171484
-
SSDEEP
768:axwY+e0TRQO03XIIrbcbZG0TprBtBm42kox24X08a1UNmm:aKY+e0TKbXIIrYtvprBtBm42BYB
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
df53c37b9ad5841d16c737bf391c8c4145a4a5bfa0a86a09599b967a06f04743.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Themida Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE