Behavioral task
behavioral1
Sample
9ffc9d84eba0991901eacd02c80d3721b768fcd713c7b36f471666880ec25053.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ffc9d84eba0991901eacd02c80d3721b768fcd713c7b36f471666880ec25053.exe
Resource
win10v2004-20221111-en
General
-
Target
9ffc9d84eba0991901eacd02c80d3721b768fcd713c7b36f471666880ec25053
-
Size
473KB
-
MD5
40ca466d15869aeb1ffa6ff39d1e312a
-
SHA1
de6efd105ea7557c9bd0c6106153fb81f084cdf6
-
SHA256
9ffc9d84eba0991901eacd02c80d3721b768fcd713c7b36f471666880ec25053
-
SHA512
773bfa6c1a9ba6da8af4327c034a5c602504d2cdd826ae4ebe813fe26f1e969741103d277873bce86b463083f367500667f667779889dd65c0f73f94b18d8b39
-
SSDEEP
12288:RE+4zbKJr/dMWkbTm4TF5CQD56NzCvxHt9xB:ai1/d1kH54zG5B
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
9ffc9d84eba0991901eacd02c80d3721b768fcd713c7b36f471666880ec25053.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE