Behavioral task
behavioral1
Sample
f1313a21099ba717c7fe2da8710fd79fd2cd1ea727bbda4477545883fa538dd9.exe
Resource
win7-20220812-en
General
-
Target
f1313a21099ba717c7fe2da8710fd79fd2cd1ea727bbda4477545883fa538dd9
-
Size
796KB
-
MD5
93430a59fddcce9ee3662dcaadbb860a
-
SHA1
d03f6d6d7400b79f6783f7a90a0518673e0d546b
-
SHA256
f1313a21099ba717c7fe2da8710fd79fd2cd1ea727bbda4477545883fa538dd9
-
SHA512
20200809e65cc5e44c6aacbca93c5eecbbb4551d223d572517e13a8f6c901787d48fdbe6caca9607a13ff1aa60eb132798a9355ae6801e73531b32114d3eab77
-
SSDEEP
12288:eY7HJWxcf5NjUNmaO2JDGEVo1T+OYSzho7cGcF8MEDKB35EJwGXZ6bnHEU:pHJWWf5tUNmaO2JDGEW1VGcKXvJwGyn
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
f1313a21099ba717c7fe2da8710fd79fd2cd1ea727bbda4477545883fa538dd9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 743KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE