Behavioral task
behavioral1
Sample
ba9977c121ebada8b83ba6e80f9b264dc49bac5520569f4d3f51914ce495609d.exe
Resource
win7-20220812-en
General
-
Target
ba9977c121ebada8b83ba6e80f9b264dc49bac5520569f4d3f51914ce495609d
-
Size
2.2MB
-
MD5
151c9695d4c1784ed3f806e49142b45b
-
SHA1
e55dca3823a567e9d468d5d03e53f601334c1c6d
-
SHA256
ba9977c121ebada8b83ba6e80f9b264dc49bac5520569f4d3f51914ce495609d
-
SHA512
db4e795d0353b3e035ad6d44337d98ce580c0df6368c56ce8939d2bf2d3659de0583eef3171b95a764c7b6414e1bf659be0dac239dfdec312478a5093c161814
-
SSDEEP
49152:4vGjNHP9E4O943tQyJC0h1bUj3gba9/7xbOOIvAhGzfJuEACH:4YHFlO94dXJB1g8bal9br4AhGbJVLH
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ba9977c121ebada8b83ba6e80f9b264dc49bac5520569f4d3f51914ce495609d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE