Behavioral task
behavioral1
Sample
76c1d6166a22413477cb4536c1d9b12b4238ff1686d63a5c2af94db57c54f9c9.dll
Resource
win7-20221111-en
General
-
Target
76c1d6166a22413477cb4536c1d9b12b4238ff1686d63a5c2af94db57c54f9c9
-
Size
602KB
-
MD5
45b064368e45211ac2b09b426ed8cb05
-
SHA1
a92a4937a9b7199110804b82f74ce848bed082b2
-
SHA256
76c1d6166a22413477cb4536c1d9b12b4238ff1686d63a5c2af94db57c54f9c9
-
SHA512
f8064ac42acf3308ee1116d63c03c38d35416e0a449694b0126bc714f326246afb048e860fec5de053dc1c79084a1ad0cc28e1e14d36a5fe27660859eb17dd65
-
SSDEEP
12288:LzogPz0TB69fnDJGJJEjJXCIyR8agjQMdmuOLd/L3e4KzK98a:jPzYBqvVNjxHyR8JNMuEd/LO4iu
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
76c1d6166a22413477cb4536c1d9b12b4238ff1686d63a5c2af94db57c54f9c9.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 590KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE