Behavioral task
behavioral1
Sample
COPIAD~1.exe
Resource
win7-20221111-en
General
-
Target
9eccc7892ae83e7445c1503d654211dea9b97025df9f08cb302af00493076b1f
-
Size
601KB
-
MD5
76242220ae9e0c1c51dc99af69bc28c0
-
SHA1
e4c48bf4e9af589d65aae2f471b2394eec58f47a
-
SHA256
9eccc7892ae83e7445c1503d654211dea9b97025df9f08cb302af00493076b1f
-
SHA512
6902b4e8e2741b262cce634dfedefda0eb4950b214426a103b83789857f9d69a37f98c8b72b4c5c84e5513fb3bb0ce6b2a0ed35e1b07c4510b6b7d209406287c
-
SSDEEP
12288:WbIPz0ufTnRxN99dpa0PYZ7jvRBfhb158L9m3bikWGUNofm0byb9Wf4et60:2IP4orRPxQ0PYZ7jvl0L9m3byGxvbyoR
Malware Config
Signatures
-
resource yara_rule static1/unpack001/COPIAD~1.EXE themida
Files
-
9eccc7892ae83e7445c1503d654211dea9b97025df9f08cb302af00493076b1f.cab
-
COPIAD~1.EXE.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 628KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE