Behavioral task
behavioral1
Sample
ac4b31318619e62fed9838f719d2db567f92111df3800bf06891a48449c718d1.exe
Resource
win7-20220812-en
General
-
Target
ac4b31318619e62fed9838f719d2db567f92111df3800bf06891a48449c718d1
-
Size
680KB
-
MD5
27c18be30b865be04a57fe8d55d3408c
-
SHA1
2ad50d444a062a7edf241ac47119446473afa208
-
SHA256
ac4b31318619e62fed9838f719d2db567f92111df3800bf06891a48449c718d1
-
SHA512
06829944152f9aedc3f57fde03b364f59f2a346f397d8dc8be63ce029ecd80bd254b033f6ad8d290cf24f63fc309f5b3217ade80ed478898a8ea778383f5a859
-
SSDEEP
12288:I67zASL+eZCYCFvMbKvHGPAViEKJK6kLNPts2P5tR9NUXa3irNEgyPE:I6H/bYm2HGuiE5tJlzRz3Vgyc
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ac4b31318619e62fed9838f719d2db567f92111df3800bf06891a48449c718d1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 626KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE