Behavioral task
behavioral1
Sample
ba46e44a5d45bf3dda40164a55f92c7674c73f26a9196d75346f495dbf4d801f.exe
Resource
win7-20220812-en
General
-
Target
ba46e44a5d45bf3dda40164a55f92c7674c73f26a9196d75346f495dbf4d801f
-
Size
824KB
-
MD5
2417514a04b0eabda0077017145d9ec9
-
SHA1
fcb8e66a1e641c1269775b152a8480c07fde0859
-
SHA256
ba46e44a5d45bf3dda40164a55f92c7674c73f26a9196d75346f495dbf4d801f
-
SHA512
8eecd516d1dc57d12e6c72c37cfcd75cce9fd5e68cf07d957ef350312c448ac9aa600cbac9828fcc10b8514b5c36bc28dd405e0c55097fa63f707bb25bfd750c
-
SSDEEP
12288:oPao42k6Crg+GteXJb8aWyKiEJyLfLoi/2AKLdMdRCQwwJvzhnwVh9/4kVXd:oPe281AyAaLEJQzH/FKLOnwVh9/4kRd
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ba46e44a5d45bf3dda40164a55f92c7674c73f26a9196d75346f495dbf4d801f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 692KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE