Behavioral task
behavioral1
Sample
b2e60081d5b9df0dcdcbc6791b81d461cdb3986ff617c48e3b591db3c276d26c.exe
Resource
win7-20221111-en
General
-
Target
b2e60081d5b9df0dcdcbc6791b81d461cdb3986ff617c48e3b591db3c276d26c
-
Size
770KB
-
MD5
beaa58cf08a9bb3835519a5a93008a38
-
SHA1
f07d55c156a2ae598d30ec059465b4d59b399ccb
-
SHA256
b2e60081d5b9df0dcdcbc6791b81d461cdb3986ff617c48e3b591db3c276d26c
-
SHA512
6fb280bbe7dca1959488bf6cd05e97be3fa2f39853a98a7b68cf4cf280e6aa2ec13f1c8bc78b83bfe4db325a6e8554f608335a3f2a5a9094455a246b72761565
-
SSDEEP
12288:iIGwgRw9G/U3yf4EpRMfMw0YyUpiOJSI5+M0KIiSlW3dscVPh9+US:d99MIaNpRMfrdhpFJN5r3zSlcVP+r
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
b2e60081d5b9df0dcdcbc6791b81d461cdb3986ff617c48e3b591db3c276d26c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 729KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE