Behavioral task
behavioral1
Sample
998fbd544f347ce9f0e6a394b380bbb52045926b824304d69005abf085c32d89.exe
Resource
win7-20220901-en
General
-
Target
998fbd544f347ce9f0e6a394b380bbb52045926b824304d69005abf085c32d89
-
Size
738KB
-
MD5
214e7e8b30dc6edd60c74898ca37782b
-
SHA1
13d25e769604e58739bafee6cbb962ce6587681c
-
SHA256
998fbd544f347ce9f0e6a394b380bbb52045926b824304d69005abf085c32d89
-
SHA512
a6ac70d725f7959b0cf0c650daf4cfe9272bd5541d9a0ce201e3f9e310b850f4564d93a0ebe02c294baf7a869c01465ed8304fc4b89e303f9abf873278602943
-
SSDEEP
12288:HacfKHQ6UqnaiqcTDlM14Rj56xvLBcmXaEp/Sf9Ww+29wy9SWjm74bf235H5:HacH6cIDi13x9cmXp/www+gHm79D
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
998fbd544f347ce9f0e6a394b380bbb52045926b824304d69005abf085c32d89.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 285KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 427KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE