Behavioral task
behavioral1
Sample
cef5f40def0df4c1eafd0b363ce8bb65f448be437a92d4fb6518281f628bc5f1.exe
Resource
win7-20221111-en
General
-
Target
cef5f40def0df4c1eafd0b363ce8bb65f448be437a92d4fb6518281f628bc5f1
-
Size
1.9MB
-
MD5
170e7282617b6aa404cb7564d62cf90e
-
SHA1
894d1a82d80237d8b2a12e834deff38fee1bdd38
-
SHA256
cef5f40def0df4c1eafd0b363ce8bb65f448be437a92d4fb6518281f628bc5f1
-
SHA512
9196c317e75d6001a8bbb60b64465037cbc7e68f1d7f44b1053ef64e90b468f10373e03b11fc894ff09e99b763f029623f4546116d7741c4da6689ac747fd9f1
-
SSDEEP
49152:mp8d8+dt8wPL6Cb07k+NFszij8SmAUcuXf/:mXJKL6b7k+Hsz08S79Af/
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
cef5f40def0df4c1eafd0b363ce8bb65f448be437a92d4fb6518281f628bc5f1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.9MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE