Behavioral task
behavioral1
Sample
e8229aec69db15e5856230fa93043ec3a2e301cf923bc88104bb61a2ac1a4a03.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e8229aec69db15e5856230fa93043ec3a2e301cf923bc88104bb61a2ac1a4a03.exe
Resource
win10v2004-20221111-en
General
-
Target
e8229aec69db15e5856230fa93043ec3a2e301cf923bc88104bb61a2ac1a4a03
-
Size
614KB
-
MD5
619c9c334bfd0b577385b4a94fea9043
-
SHA1
64719fe607fc4d7b46c2253014c3a242257ed9ca
-
SHA256
e8229aec69db15e5856230fa93043ec3a2e301cf923bc88104bb61a2ac1a4a03
-
SHA512
a6633dd637b9751d2d23ff025054cda9b4d39505815b54c59ef5cf3dc16be7eb854751ee831bb351b4fd035067ff7a48a049874f2a9a3ea9dd5de40575ad88ee
-
SSDEEP
12288:S4hRsOZ4MU5HIeDhj2QHqsj6wnDccY6O97dg7bQ07k5MuW1IBXb+:SXOZ4DHIHQHq06UY6Q72c0huWUi
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
e8229aec69db15e5856230fa93043ec3a2e301cf923bc88104bb61a2ac1a4a03.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Themida Size: 512B - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Themida Size: 613KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE