Behavioral task
behavioral1
Sample
a5468050d2cb8f49ae520e2a1faacd3d1e6a3cf62f3f39261902f861c9344e63.exe
Resource
win7-20221111-en
General
-
Target
a5468050d2cb8f49ae520e2a1faacd3d1e6a3cf62f3f39261902f861c9344e63
-
Size
696KB
-
MD5
b1771cc3d73ef15676f09f75b9763877
-
SHA1
b2d16f551f0e36fa043b5fce12ceb73970e2d11e
-
SHA256
a5468050d2cb8f49ae520e2a1faacd3d1e6a3cf62f3f39261902f861c9344e63
-
SHA512
57dafb547eee4cc2fe2af4e7d58105e853596d5143bf13a4d5faecb92ef5cd44ef1a99b443768502c9aa7f646a42c38a7a6cb10708dcdb4d9e4ae67b40d39b38
-
SSDEEP
12288:L6rRj4PaTCfLrfDsPBfUBKpDi/AGjGp5DJD0scvoS33tZ9Iwmp1wDyU:LMj4SgLr7sZMuioGjG7GJoYdIwmpmOU
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a5468050d2cb8f49ae520e2a1faacd3d1e6a3cf62f3f39261902f861c9344e63.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 654KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE