Behavioral task
behavioral1
Sample
f23f8490123c14bda0df2b5e6dd652b19ad2e08a9671d48ea4898659c55e1aec.exe
Resource
win7-20220901-en
General
-
Target
f23f8490123c14bda0df2b5e6dd652b19ad2e08a9671d48ea4898659c55e1aec
-
Size
1.9MB
-
MD5
5d4610053c4eb297dd8711e21fd5ff2f
-
SHA1
e4d947ca2b3c3218f6a783189a355046a29838cc
-
SHA256
f23f8490123c14bda0df2b5e6dd652b19ad2e08a9671d48ea4898659c55e1aec
-
SHA512
324fe15e838c34a09040b5ca16f1c574efd3b50da778e9a07bdf1c619614a105a0ec730d89e189d012f7c863ad45e282daaf9a4e969276ab5529847ac01dd6f1
-
SSDEEP
49152:OdocdOOU+IK+CB6MDeotpA/jkR6MotSxlsMb/5FaARPSdqLas9ekG4F:O1U+zT3Ttwj+6hMlt/5PVSdoF
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f23f8490123c14bda0df2b5e6dd652b19ad2e08a9671d48ea4898659c55e1aec.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 571KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 616KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE