Behavioral task
behavioral1
Sample
aa3c91aa6a340df7756c7913b207281a6f65eb6736f19a73b700cbea93db2cab.exe
Resource
win7-20221111-en
General
-
Target
aa3c91aa6a340df7756c7913b207281a6f65eb6736f19a73b700cbea93db2cab
-
Size
1.9MB
-
MD5
70b641f5654ec4aac9c20ba99926caa0
-
SHA1
9cbbd3fa869a6306381ab650c51858156f7b9d33
-
SHA256
aa3c91aa6a340df7756c7913b207281a6f65eb6736f19a73b700cbea93db2cab
-
SHA512
295f26dfe42f29730545e7482fe08da3c83cef563755d6a77a2fa4219dfd98636bf2bf33b0ddbb91ba67ecb3ab12a715df5e0d5e9caaf3bb9d0d657d3fd8b596
-
SSDEEP
12288:GkQjzZUgcwqKBK+ktPb3vYJyQCbK9Ufz8FRlikZFzhaPa3xz8gaCGJpoPazjgqm2:zwSK0DmKK9U78Fz/zAOzkJtp+Tsz
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
aa3c91aa6a340df7756c7913b207281a6f65eb6736f19a73b700cbea93db2cab.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 564KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE