Behavioral task
behavioral1
Sample
950436247ae8482e10006d75dd47a7914c9fc0613283c90681461d299208019d.exe
Resource
win7-20221111-en
General
-
Target
950436247ae8482e10006d75dd47a7914c9fc0613283c90681461d299208019d
-
Size
713KB
-
MD5
ab118564ab86ee5ac440037d505e84ed
-
SHA1
3414e32f8d40f5a0d9e22262ccc9576c37a50909
-
SHA256
950436247ae8482e10006d75dd47a7914c9fc0613283c90681461d299208019d
-
SHA512
71476effa3626638ce22bc1edcecc0a560196ab9b56148507f129c462e588e4fa8d08c6cc27b7d377d40746e1b39723c2dab729792a10ea5fc318d1f52996d0a
-
SSDEEP
12288:08pr0l2PSRqtEXNO5ukoh4cy/UV1M/x+jxSrh3sAt925lh+6rdZIrbcJfdhsOJ1E:prA2PS8kNHkoQUV16RF31tAjhZbAEQOc
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
950436247ae8482e10006d75dd47a7914c9fc0613283c90681461d299208019d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 596KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE