Behavioral task
behavioral1
Sample
f02b8ea03ba18aaf6990e33b10008fcc1414aff502fca5610cc6cf9c20e2955f.dll
Resource
win7-20221111-en
General
-
Target
f02b8ea03ba18aaf6990e33b10008fcc1414aff502fca5610cc6cf9c20e2955f
-
Size
1.4MB
-
MD5
2549b94da2965f0f80e8b012dd0205f8
-
SHA1
6d593853d145d4ccb1b0d8de123fb1aa216ad0a2
-
SHA256
f02b8ea03ba18aaf6990e33b10008fcc1414aff502fca5610cc6cf9c20e2955f
-
SHA512
7fb7d4141a32e990d5ccc26cce72309295e03c3d147f5e63828246bdd5b463a692747024b6c821834888a2d08d89205c27f81b21b4c0a19c8cfaed3420376a86
-
SSDEEP
24576:J4txeqJ5oIbP18dPioscbQ210o+9QOcK5qeGtnBnzkXrj8JU+zPq/:J47eBomwotbM9QOD5XGtnBnwEJbW
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f02b8ea03ba18aaf6990e33b10008fcc1414aff502fca5610cc6cf9c20e2955f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 108KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE