Behavioral task
behavioral1
Sample
a16b4180751d3eda4711578578aea3be886e00623f66f17588d0e194d0c09c05.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a16b4180751d3eda4711578578aea3be886e00623f66f17588d0e194d0c09c05.exe
Resource
win10v2004-20220812-en
General
-
Target
a16b4180751d3eda4711578578aea3be886e00623f66f17588d0e194d0c09c05
-
Size
893KB
-
MD5
f1780ff750f979781b91cbff1b49c9bc
-
SHA1
969988c7f079278d2a52d5dd582c69b77e2679f4
-
SHA256
a16b4180751d3eda4711578578aea3be886e00623f66f17588d0e194d0c09c05
-
SHA512
68176b4b5c53d3ff0e8031079544e220a777b1824b39097a0db69a90d0135a7a6c2f4199354c80bbe7cde75cf879c4fbcf14cf18fc0d2b5c0a3367a0f9048db0
-
SSDEEP
24576:B4sHnXS7XxpkU2DyQSAfQG0HxHHmpn6sxf43tBL0axkjbU78dwy:BpHXashDIAfCxnBsN4dBwaxkj88K
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a16b4180751d3eda4711578578aea3be886e00623f66f17588d0e194d0c09c05.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 42KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 779KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE