Behavioral task
behavioral1
Sample
c8ac48b0b7243cd504a285709498f1cc839d6f3098c763c91be04ac6fc65b57b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c8ac48b0b7243cd504a285709498f1cc839d6f3098c763c91be04ac6fc65b57b.exe
Resource
win10v2004-20221111-en
General
-
Target
c8ac48b0b7243cd504a285709498f1cc839d6f3098c763c91be04ac6fc65b57b
-
Size
1.6MB
-
MD5
5c56c2b69a9d277381994eca45ee4012
-
SHA1
db29765b1c7d7e96cebc929249982f0188fd28ab
-
SHA256
c8ac48b0b7243cd504a285709498f1cc839d6f3098c763c91be04ac6fc65b57b
-
SHA512
3c469bad5848abf5039173c3e2aee6fc228d139fe5ac80c1707c0ff4a7091b9b7ec2f556157b47b2c2c88b2d6cb87f78cbadb4fd25c57b84953fcd7537720e08
-
SSDEEP
24576:d1QGa+c++c3uFSZY9aNn6htfykqFNCczbd4KF8jAq1aSgWLUsyY3US:syx+X0ZY9aN4fUFNCczbd4PjAJJ6ES
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
c8ac48b0b7243cd504a285709498f1cc839d6f3098c763c91be04ac6fc65b57b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE