Behavioral task
behavioral1
Sample
ffe1077bfc1294f9646e9313581d7f87147ffd8a19e860e7bc6057d393eb9626.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffe1077bfc1294f9646e9313581d7f87147ffd8a19e860e7bc6057d393eb9626.exe
Resource
win10v2004-20221111-en
General
-
Target
ffe1077bfc1294f9646e9313581d7f87147ffd8a19e860e7bc6057d393eb9626
-
Size
1.6MB
-
MD5
15385fc0c02c92fb26144fb7ce83fbfe
-
SHA1
921bdc67509f419508264cc93b92e79ff1ca7d59
-
SHA256
ffe1077bfc1294f9646e9313581d7f87147ffd8a19e860e7bc6057d393eb9626
-
SHA512
7aec82da8b9301b2756401c6cb2ff68cc884317154484a287e5a01575abe8f4b0b25df75bda4a104bb2ec6fa40643757ed136a1269eea31344085f5f8e2e2c48
-
SSDEEP
24576:wQbVtymcwfdDD5E0T41QqGha0c+UoCLV5m0D4jYgIZrGfYTl60no/dh:XM2dDDG1PG1cBo6V5m0Dc+UfUoOo/dh
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ffe1077bfc1294f9646e9313581d7f87147ffd8a19e860e7bc6057d393eb9626.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 48KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE