Behavioral task
behavioral1
Sample
e22df994022d6734e7dfea47792f6e20f2cf57fb369133e52648c514e943fedd.exe
Resource
win7-20221111-en
General
-
Target
e22df994022d6734e7dfea47792f6e20f2cf57fb369133e52648c514e943fedd
-
Size
2.2MB
-
MD5
efbbca7035e1b3baa4fde3a2057398cd
-
SHA1
37b63121284dce467b10c46164b32c7be837752a
-
SHA256
e22df994022d6734e7dfea47792f6e20f2cf57fb369133e52648c514e943fedd
-
SHA512
88110313dd13112227d3b997ea4eac8f19aa11961fee2eba99d68f3bf3ef541606d54aa450f71a2a6a0359289ce5eb950799dd6d8078dbe0161bd3d495e534b1
-
SSDEEP
49152:7Zi3PhnWK0hKkRpq0OVjbSG1Z+zk8KHIvbOw7qlcpUndXYaneA:Fi/ZWK0Ak/oyGf+gWOEMcpsnnR
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
e22df994022d6734e7dfea47792f6e20f2cf57fb369133e52648c514e943fedd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE