Behavioral task
behavioral1
Sample
fb62f6d28fddf7a35934819319328ac59e566cf59a43c4253a1383d0b526baa2.exe
Resource
win7-20220812-en
General
-
Target
fb62f6d28fddf7a35934819319328ac59e566cf59a43c4253a1383d0b526baa2
-
Size
1.3MB
-
MD5
6d7a4a624133b300724906800eba4ded
-
SHA1
2c20d04fe47559d6486fe5e2b20abb9aae3d7cb6
-
SHA256
fb62f6d28fddf7a35934819319328ac59e566cf59a43c4253a1383d0b526baa2
-
SHA512
a55c45d9177b59ce39c3e58a4420c0ed170aba5f3067e3ecb8321c48a038343bfaab66c072b979046adce8b3547dc73af664c9d36516cd15fcc881c0a34fc7a4
-
SSDEEP
24576:uzKflMblROVMlJM0+X2dy0/ybs23IHeg7eFX69eZy8fN7XAMDhN0eSc4TEcgMdLr:uQl4aM3M0vdjy1Bg7e1/Zy2dA0N0DXSO
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
fb62f6d28fddf7a35934819319328ac59e566cf59a43c4253a1383d0b526baa2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 619KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE