Behavioral task
behavioral1
Sample
0005126838422933f51a1e47235553929e7ed0f09c17e64fac810a7766ae9b39.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0005126838422933f51a1e47235553929e7ed0f09c17e64fac810a7766ae9b39.exe
Resource
win10v2004-20220812-en
General
-
Target
0005126838422933f51a1e47235553929e7ed0f09c17e64fac810a7766ae9b39
-
Size
152KB
-
MD5
7f6bd663391e3dd7c26399cd2d298db3
-
SHA1
6a84715a8dc0493ad98041c44647b237fbbe6126
-
SHA256
0005126838422933f51a1e47235553929e7ed0f09c17e64fac810a7766ae9b39
-
SHA512
ad033ae31f7424239b427a6ede5e74b0891c75a1c537901a30e53f98228548866f9d215a789f336a7909edd7d6fed158f4df7af75b1a13b571ed28dccd55dc16
-
SSDEEP
3072:rhqZdPkbBu0o+tyoEjkwTSgsEpkt3t0Zd1E5e0An7Hv7xEaFArU/6:6d8k+t5mkwIsK5e/3maKrU/6
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
0005126838422933f51a1e47235553929e7ed0f09c17e64fac810a7766ae9b39.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 672KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE