Behavioral task
behavioral1
Sample
a90047dfa88aacbffbd0600c61e27421ca8a131f898df55086ddc5247b16228a.exe
Resource
win7-20221111-en
General
-
Target
a90047dfa88aacbffbd0600c61e27421ca8a131f898df55086ddc5247b16228a
-
Size
608KB
-
MD5
39de28fd3c0f2ddd69489619831fe0f4
-
SHA1
fad41c888f65f53e7400914a3ba249914c199d32
-
SHA256
a90047dfa88aacbffbd0600c61e27421ca8a131f898df55086ddc5247b16228a
-
SHA512
56fbf92704d184415f8c0517356a438fc8608d9a3409bca0af3a16ef2aeb7b2fe451df4733b4c7f8e661440fba0a7fb3fdee13abfa0eff5e14d4dd9ded39ebe6
-
SSDEEP
12288:ZopihZkeY8unPZep9lvs1RRAF7n3cPHbKN7SYFnFBb10OX0+D:ZoCtAe3lU/ROMPIx1rb1o
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a90047dfa88aacbffbd0600c61e27421ca8a131f898df55086ddc5247b16228a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 568KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE