Behavioral task
behavioral1
Sample
c680747e005abc47d6aae6cd92b72ac5fa6d73d42505c399a6a0a97202d5f7c4.exe
Resource
win7-20221111-en
General
-
Target
c680747e005abc47d6aae6cd92b72ac5fa6d73d42505c399a6a0a97202d5f7c4
-
Size
740KB
-
MD5
1b465e1ef7a4a2ddd54e3f00191d1f66
-
SHA1
01432143332aa0291de4b870e391724e8b4f182f
-
SHA256
c680747e005abc47d6aae6cd92b72ac5fa6d73d42505c399a6a0a97202d5f7c4
-
SHA512
900aa3d638ad674409c8bbbdc59e9d4d7aec541e9e1da68e63e7fa0e7ff502e300c07cfc78dee0dd195d79622b2645a0b2220ee9943179d2873f4a25731059c7
-
SSDEEP
12288:P6E+uLwwX9bquqvtU4j6y0bYDEpB+FerhhEGjAJu6kVJpPumkzgZZ+o:PF/X9utq66/YDuMahhEG0U6AJpPuU
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
c680747e005abc47d6aae6cd92b72ac5fa6d73d42505c399a6a0a97202d5f7c4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 120KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 608KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE