Behavioral task
behavioral1
Sample
c1facbbff09a987348f34c34db485d8cda6f0f6dc2e961e8cb5483db3a82fdd7.exe
Resource
win7-20221111-en
General
-
Target
c1facbbff09a987348f34c34db485d8cda6f0f6dc2e961e8cb5483db3a82fdd7
-
Size
531KB
-
MD5
bbeca107766329137cde680ff1f74ebe
-
SHA1
612573616d499208dd69bc5c8a4523f3f8875908
-
SHA256
c1facbbff09a987348f34c34db485d8cda6f0f6dc2e961e8cb5483db3a82fdd7
-
SHA512
3fd001d2541c0d42f173107bea07671de09883fe7cc3b622ff744b477b212a1ed9fca8273bea03421daece3dff6fb33e9b7912591f2f6480c36311473f78e3ac
-
SSDEEP
12288:KAdflhWiuONkRV2kDGeafXCqAW9G8Xs/5VVUVY11:KAzhWVO+ekDGeaad8I5VVUK11
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
c1facbbff09a987348f34c34db485d8cda6f0f6dc2e961e8cb5483db3a82fdd7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 514KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE