Behavioral task
behavioral1
Sample
eb435f3a4b01043c745319a8dc4f8439d375c03d5a59f34d967fbaf21011b7b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb435f3a4b01043c745319a8dc4f8439d375c03d5a59f34d967fbaf21011b7b4.exe
Resource
win10v2004-20220812-en
General
-
Target
eb435f3a4b01043c745319a8dc4f8439d375c03d5a59f34d967fbaf21011b7b4
-
Size
1.1MB
-
MD5
0bd46ba221509bc9807ded1d706b539d
-
SHA1
e7b2924c4cce0cff865a2566267525a77101379f
-
SHA256
eb435f3a4b01043c745319a8dc4f8439d375c03d5a59f34d967fbaf21011b7b4
-
SHA512
f497d197195b0f61576abdd1074f90bead364fd711034ccf3fbf3e5ed9711d5c7188daf6a8d81dbb9392611c30e65e761b685269365876e71a1b68a9130b5c30
-
SSDEEP
24576:pwAM28IjkopcrXu8qomUNkXA1Gr9Gl39HoOdMOK:E28okopV66XgMG/IC4
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
eb435f3a4b01043c745319a8dc4f8439d375c03d5a59f34d967fbaf21011b7b4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE