Behavioral task
behavioral1
Sample
a406fa14765c115c11a64734b406f4a5482f844c2c96e17c9f8570c24baece1a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a406fa14765c115c11a64734b406f4a5482f844c2c96e17c9f8570c24baece1a.exe
Resource
win10v2004-20221111-en
General
-
Target
a406fa14765c115c11a64734b406f4a5482f844c2c96e17c9f8570c24baece1a
-
Size
1.1MB
-
MD5
d3b11c6317e8b3b73f6600555d19fdaa
-
SHA1
0204624585b398c73181f219382fe151b3c569d2
-
SHA256
a406fa14765c115c11a64734b406f4a5482f844c2c96e17c9f8570c24baece1a
-
SHA512
b475d0288d84c114037b408b1250df7a54bb58970fded2376185b5eb7e1ba7d897df0d56281fc8f01fa64338129a72d73e75c744d1a2ebfc283e369953ecb331
-
SSDEEP
24576:BaFPIS6r7UHYK7U8+xr4yfqzKJkaXkmmI73KYXyYzayFh9:UFAP/qYiqRfzkaXk1Oxyvs9
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a406fa14765c115c11a64734b406f4a5482f844c2c96e17c9f8570c24baece1a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE