Behavioral task
behavioral1
Sample
a86e3e7710e249721a2b7269383e873bdeaa4fe0e99879fd833dc8fa170f8056.exe
Resource
win7-20220901-en
General
-
Target
a86e3e7710e249721a2b7269383e873bdeaa4fe0e99879fd833dc8fa170f8056
-
Size
646KB
-
MD5
6cd952ac0f9629fbba7b313742641a6f
-
SHA1
c7f19143f6f095085af47f94649d07c9ab44aea0
-
SHA256
a86e3e7710e249721a2b7269383e873bdeaa4fe0e99879fd833dc8fa170f8056
-
SHA512
a32edb0cbf5924d9e682eae598b2988344c4227c537e73a60c3aeba5d3cdee0fd72bf1c71b5680fc210b44e6c544317e95f57d37f6718a89306d8a0f7c4924f9
-
SSDEEP
12288:K0AUcT+rWgvEvTuXFO/8Me0cHCYVF9T+JbtrBbF0RR8BBLL:mULrWa0KoV53oHT6trBZ0AB
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a86e3e7710e249721a2b7269383e873bdeaa4fe0e99879fd833dc8fa170f8056.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 27KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 615KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE