Behavioral task
behavioral1
Sample
bb141aa05702cf4587ba2af5085a2a571f1bf85ee395354f684476e270168224.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb141aa05702cf4587ba2af5085a2a571f1bf85ee395354f684476e270168224.exe
Resource
win10v2004-20220812-en
General
-
Target
bb141aa05702cf4587ba2af5085a2a571f1bf85ee395354f684476e270168224
-
Size
1.6MB
-
MD5
0c8446e9b3987541cad564373b2c07f9
-
SHA1
bde76410778b37b33119640a82ad705f75ef90c2
-
SHA256
bb141aa05702cf4587ba2af5085a2a571f1bf85ee395354f684476e270168224
-
SHA512
9e6ca8c012ea0f77f18e6696befc7a442e0511e0cc51db9ef2f3b09c763c7c681b88cea05d34230cd7cc220941b055ed3cb363b70e5564680b811c79b63e9edd
-
SSDEEP
49152:oES+tDA/8gl2UPJTVVxapwciPe8P6oIU+L9mGgQLNp3Vw8RwnDowSbmoq42Nw7WS:ptDA/Fl2UFswcGP6oIU6jgY
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
bb141aa05702cf4587ba2af5085a2a571f1bf85ee395354f684476e270168224.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 56KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE