Behavioral task
behavioral1
Sample
a17019b4d624a8bbfe80235883500d5dfa66ffb63432628c4800b25fb5712725.exe
Resource
win7-20221111-en
General
-
Target
a17019b4d624a8bbfe80235883500d5dfa66ffb63432628c4800b25fb5712725
-
Size
656KB
-
MD5
24f01f958906e3edcacb181c1e9870c4
-
SHA1
0e9d526ff8f048d632149f4db4c3b8b5b530ab76
-
SHA256
a17019b4d624a8bbfe80235883500d5dfa66ffb63432628c4800b25fb5712725
-
SHA512
bd65f11596fcf03c83e4f42b566bf01deca2adf98a24ca881383fe07b6148707fc3674b0d3a06987b7bf869bd783ef5a3aef376f9595fdfb48be08249f9f4955
-
SSDEEP
12288:dXg/+79LUCkI7qLwUa5q/5irZavKiyaM/d/XXCvINXHx1ZAkR:3LGIekb5Qnyi65NXRzbR
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a17019b4d624a8bbfe80235883500d5dfa66ffb63432628c4800b25fb5712725.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 624KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE