Behavioral task
behavioral1
Sample
e129d921b5fee017e382540bc916b4f7dd65ae3437f2e7a097c3228e797851e9.exe
Resource
win7-20220812-en
General
-
Target
e129d921b5fee017e382540bc916b4f7dd65ae3437f2e7a097c3228e797851e9
-
Size
1.3MB
-
MD5
0babebd46665608b9eb5391462a5e853
-
SHA1
3522605d794a53d447040b3a240b1ceb84f9628b
-
SHA256
e129d921b5fee017e382540bc916b4f7dd65ae3437f2e7a097c3228e797851e9
-
SHA512
c21ddb641c0b83f0f2fc2bebfd856424097b0fc6a28dd7b2edfa5087864fbdb444a538546f28f127c3ad1ec889d8c95dc5f702b0cd5ff1fb37669092d9fc775a
-
SSDEEP
24576:1I/u4naCM/BUP6Fh6ZWoPRUaJ7LYivgSG1EzTFOvIYePbnbtg8SSZJDFce/m3t:1I/LaVs6Fh4WoP207EwvGOzkIYury8na
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
e129d921b5fee017e382540bc916b4f7dd65ae3437f2e7a097c3228e797851e9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 551KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE