Behavioral task
behavioral1
Sample
8e5af06d3e90c3599c71258727fddd8804d7d1637ce273e4ff42579527cc04cf.exe
Resource
win7-20220812-en
General
-
Target
8e5af06d3e90c3599c71258727fddd8804d7d1637ce273e4ff42579527cc04cf
-
Size
1.8MB
-
MD5
838897bba8539177e03c0b19b676b719
-
SHA1
4e73ac5ee3815ac184c8d442a52ad0df60df9744
-
SHA256
8e5af06d3e90c3599c71258727fddd8804d7d1637ce273e4ff42579527cc04cf
-
SHA512
81c679820d6f54377837d6978624bacac288bbd36d405518f24b4040cea52d289697b67fd45dc7a90df856ca1e4202071ec42f6935c10b1ab6458b03ed8c0e43
-
SSDEEP
49152:LyKBP7KsHpLctqbS/A7hHtTGtexeF3O5EBodj5RqCaHv:L/DKsHCUqOHtTneOrpUHv
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
8e5af06d3e90c3599c71258727fddd8804d7d1637ce273e4ff42579527cc04cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE