Behavioral task
behavioral1
Sample
bcc38219d78d54f00bc603ad65d116ff8e042be23c01cab395938bc713f75ef6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bcc38219d78d54f00bc603ad65d116ff8e042be23c01cab395938bc713f75ef6.dll
Resource
win10v2004-20221111-en
General
-
Target
bcc38219d78d54f00bc603ad65d116ff8e042be23c01cab395938bc713f75ef6
-
Size
8KB
-
MD5
876ba9ddc59e57380a2d0a3ac2ca7024
-
SHA1
d5e21c9042962ce902a6df29b7c468b3d01b1e58
-
SHA256
bcc38219d78d54f00bc603ad65d116ff8e042be23c01cab395938bc713f75ef6
-
SHA512
2d1afac748693b1ceccdc0a06cc95a968016edee99be5c2e686630f6cae69256faa3df5e9f731118f50067765cc8cd7c573f4e5b5fb8f6369114b18e6818c628
-
SSDEEP
96:WCWS3uKfXlnv+QkbzdAgSqf/XBIQfqcey1wpLEGj:Kg8VJXBIQfqcIwGj
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
bcc38219d78d54f00bc603ad65d116ff8e042be23c01cab395938bc713f75ef6.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Themida Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 859KB - Virtual size: 875KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE