Behavioral task
behavioral1
Sample
adbe77f8269ff9ce10c078cd1850e86ca082f661122ebcf4572671529426621f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adbe77f8269ff9ce10c078cd1850e86ca082f661122ebcf4572671529426621f.dll
Resource
win10v2004-20221111-en
General
-
Target
adbe77f8269ff9ce10c078cd1850e86ca082f661122ebcf4572671529426621f
-
Size
200KB
-
MD5
7fd4db5d3e58bb4526c4d86d2025b162
-
SHA1
959b54c06076d206440cc4e9da470c0ca2a34aeb
-
SHA256
adbe77f8269ff9ce10c078cd1850e86ca082f661122ebcf4572671529426621f
-
SHA512
f7f4a9cdc032312f89d148b936ba4489a304b0fa26e88b671405962cec23205ddd668c8f0155e503ac0a7cdcf9eef2d6dabd2613b9ccc0974e94ba933681afe9
-
SSDEEP
3072:l2OMw5EwCB8qKQt/Co3Z01Y+f7XJ3ZRACQh0GfCq3tjuZVkxT5hrcsEotax/RX88:EOXZV486F05pRXGn9qZaFz+XR
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
adbe77f8269ff9ce10c078cd1850e86ca082f661122ebcf4572671529426621f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Themida Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 854KB - Virtual size: 871KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE