Behavioral task
behavioral1
Sample
c306b2ca6f3db9ad3ad29e9512ddafba837f6c595ce35b9fb0f97005d80978f3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c306b2ca6f3db9ad3ad29e9512ddafba837f6c595ce35b9fb0f97005d80978f3.exe
Resource
win10v2004-20220812-en
General
-
Target
c306b2ca6f3db9ad3ad29e9512ddafba837f6c595ce35b9fb0f97005d80978f3
-
Size
1.1MB
-
MD5
81902fd2a775312325b3dc382617f94c
-
SHA1
aea13eb06c33cbcf26cc0cf1f62c4d03df037d89
-
SHA256
c306b2ca6f3db9ad3ad29e9512ddafba837f6c595ce35b9fb0f97005d80978f3
-
SHA512
96f7f0dee1d86ebf382a96ef1461d1e775b7ed893d8b8609477350d48a282d6b02d5a90b0d2defbfedcae4e2b85418f9f32d19e0cb259e180564b2523c97dfd2
-
SSDEEP
24576:WZrA2nxZD1yWT0gcGBL+hAADGUT5YC9LecPhCVzFEVaUZcTwqD:Wpx3yWQBFAADGfd54ZcTx
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
c306b2ca6f3db9ad3ad29e9512ddafba837f6c595ce35b9fb0f97005d80978f3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE