Behavioral task
behavioral1
Sample
b63624e58998108ab073051755e88f369998b32eba7b64525d5ef9bfe08deac5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b63624e58998108ab073051755e88f369998b32eba7b64525d5ef9bfe08deac5.exe
Resource
win10v2004-20220901-en
General
-
Target
b63624e58998108ab073051755e88f369998b32eba7b64525d5ef9bfe08deac5
-
Size
1.1MB
-
MD5
fed0af59b639001436af0299c50a0378
-
SHA1
f3d12751c151f8529eec13fc2fae36fe7a69a71c
-
SHA256
b63624e58998108ab073051755e88f369998b32eba7b64525d5ef9bfe08deac5
-
SHA512
402511a08e53b2a4d08ef36110a284d515f049a6e1745d1332dbea4ee297e5219c0c12eae4f19de07d52ef9910e03c4f89d0aa26198fbfdd80d8643f0b14a15e
-
SSDEEP
24576:eauEcR0nV4yt5rFLdvpvELlzYeVkbpvTU6ymXKK:etPRoVnLdxmJV29TzyQ
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
b63624e58998108ab073051755e88f369998b32eba7b64525d5ef9bfe08deac5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 40KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE