Behavioral task
behavioral1
Sample
f2ff661755d0055320ca1aebf00935f431b29cb2b999b10cd3687710d04a56cf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2ff661755d0055320ca1aebf00935f431b29cb2b999b10cd3687710d04a56cf.exe
Resource
win10v2004-20221111-en
General
-
Target
f2ff661755d0055320ca1aebf00935f431b29cb2b999b10cd3687710d04a56cf
-
Size
1.3MB
-
MD5
47be54bef680d84b6b075d30c54164f7
-
SHA1
70e312b8dcc3b9189d4d5ce997466c4cbc176f37
-
SHA256
f2ff661755d0055320ca1aebf00935f431b29cb2b999b10cd3687710d04a56cf
-
SHA512
9a97244063fa3a42045e3332250e9bbaf9484b92e9a17e6e923a2d5f20b0e5d4831cee17b873ddb6ddd49136d9040488fead3b4ed68f3ddcd528c36d982d9092
-
SSDEEP
24576:If8GKO06LGta+uTkFIVqWDo9xTjr3Wc6bH1A6+XbgRtRoVyn1V9MdX:I0KBGtvuTkFIVqcuj96bdFtRyTdX
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f2ff661755d0055320ca1aebf00935f431b29cb2b999b10cd3687710d04a56cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE