Behavioral task
behavioral1
Sample
bbad6131c7e0f1a75920cc0287efdac3ec40d7caffaf89a2d7e81d61cff62746.exe
Resource
win7-20221111-en
General
-
Target
bbad6131c7e0f1a75920cc0287efdac3ec40d7caffaf89a2d7e81d61cff62746
-
Size
706KB
-
MD5
a7c240f3faf84838ca33b10845f9c5c6
-
SHA1
2f7e1e416d0e0c40aafc7c81464a4e70ef82ca04
-
SHA256
bbad6131c7e0f1a75920cc0287efdac3ec40d7caffaf89a2d7e81d61cff62746
-
SHA512
30714092fd17238ad69f5cd431c859a0133dcad4f1bcfcf14af358458575533c59621b038cd7ec58d34bd2c5f7f5fb5481c2360a6de9df6c1aad49d372a74773
-
SSDEEP
12288:lWvRaXn3clOn7s+JnWKVGEQGWzyjgM+wrXCz0FE:GRaXnMlOn7hMgGELQMLSv
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
bbad6131c7e0f1a75920cc0287efdac3ec40d7caffaf89a2d7e81d61cff62746.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 681KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE