Behavioral task
behavioral1
Sample
ed6173c8ec7651544f75616c317f24a26bcc9f7d2305a4bfb2a49bbcee824599.exe
Resource
win7-20220901-en
General
-
Target
ed6173c8ec7651544f75616c317f24a26bcc9f7d2305a4bfb2a49bbcee824599
-
Size
632KB
-
MD5
5cb86cb336b10cc58afa40b7eede8d96
-
SHA1
fd46255ee0c62cd9edb64d862295e70bcfc0c569
-
SHA256
ed6173c8ec7651544f75616c317f24a26bcc9f7d2305a4bfb2a49bbcee824599
-
SHA512
a715353eeb3bc0afbeaa65b41b4decf67f2d7d86c6238649d80579ed36171444409baf5ab45e376d3c09200a131de9cdaa8674146bb0ae3579430f8e1f973201
-
SSDEEP
12288:zneqnDBi61EzIXxkcYy29/RA/Sk2VCP9hYm+yxg2SEXZNqEVU1LsJ2QvOJd:7tnFi61Eq6Rp9/R9V+gm+yxg2SaVfJ23
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ed6173c8ec7651544f75616c317f24a26bcc9f7d2305a4bfb2a49bbcee824599.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 622KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE