Behavioral task
behavioral1
Sample
ba42aa9ad37b0f644955e15a89aa7e9339dc8fca6c803235426a218a9e31b7f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba42aa9ad37b0f644955e15a89aa7e9339dc8fca6c803235426a218a9e31b7f8.exe
Resource
win10v2004-20221111-en
General
-
Target
ba42aa9ad37b0f644955e15a89aa7e9339dc8fca6c803235426a218a9e31b7f8
-
Size
1.1MB
-
MD5
013d4c0d5105dec1b99147de773ebc08
-
SHA1
165115a4bc11ccabc7af95889f48f7e54e559373
-
SHA256
ba42aa9ad37b0f644955e15a89aa7e9339dc8fca6c803235426a218a9e31b7f8
-
SHA512
b20e51c407832229936ed4bf3048407166c61ac551f00ab9be632b878fb17d6f904986155b29ad6496750d43565812c08106b1674821f11fd9509595816e9908
-
SSDEEP
24576:zrA2JOcea2rBHLf4d1kQ7B9Aaer8G6zR6tBpGyuWgVNS8SOr+QjeWoJJJ4ICP:7JOBa2rxf40QAa8836TOnS2KQjefJI
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ba42aa9ad37b0f644955e15a89aa7e9339dc8fca6c803235426a218a9e31b7f8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE