Behavioral task
behavioral1
Sample
bd19f0ee30e5d50d1210100bfac68a7fa58034e8ded20a2ed52f7ec424ddd7aa.exe
Resource
win7-20221111-en
General
-
Target
bd19f0ee30e5d50d1210100bfac68a7fa58034e8ded20a2ed52f7ec424ddd7aa
-
Size
850KB
-
MD5
2406004c1521360a2bda3236ff1633b0
-
SHA1
9631754a47d6a7159711fe5c945edc889441cc9e
-
SHA256
bd19f0ee30e5d50d1210100bfac68a7fa58034e8ded20a2ed52f7ec424ddd7aa
-
SHA512
d88470b9abf5c488d0ac3e56c7eb3668404ba5dbdd3e66cb996dbf90d95902a5140fd56630c9f0f296c67493b999a5b0ec82a221adc5208f8a8c5df2fb0ea5d4
-
SSDEEP
24576:IRHQhVDqDgKmXTeGRKl7jwY/v1gdtc24qokYOad7:/q0KiT+9/vGdtcbqokYOad7
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
bd19f0ee30e5d50d1210100bfac68a7fa58034e8ded20a2ed52f7ec424ddd7aa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 792KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE