Behavioral task
behavioral1
Sample
df6d8f13f4617569da1a9360cd85e35c0fc063f624dd7dbe308bd6af49b72d2b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
df6d8f13f4617569da1a9360cd85e35c0fc063f624dd7dbe308bd6af49b72d2b.exe
Resource
win10v2004-20221111-en
General
-
Target
df6d8f13f4617569da1a9360cd85e35c0fc063f624dd7dbe308bd6af49b72d2b
-
Size
1.2MB
-
MD5
31c3d9870ccf67569e800696ccfdaa1d
-
SHA1
06928a720241da3f77a38df5446178a6243ac6a4
-
SHA256
df6d8f13f4617569da1a9360cd85e35c0fc063f624dd7dbe308bd6af49b72d2b
-
SHA512
673880c495c969a3c499576d691502fd78504c944409ae6886c2e938af37d5e51ddc9f7ba60033d15377780c76097bba8629eb07120e653ba9f7f510ed3238b3
-
SSDEEP
24576:E+bEq9Z+/X2YB0wLx5AJ8xLVWARAuwTVm3z2o4vEjuL06Kre:ElQ2X2utV3xpWAiFm3z/SL06Ki
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
df6d8f13f4617569da1a9360cd85e35c0fc063f624dd7dbe308bd6af49b72d2b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE