Behavioral task
behavioral1
Sample
94a881c6f919d09dcb09e838829436da63a6ae6052333af72b453015204bac4d.exe
Resource
win7-20220812-en
General
-
Target
94a881c6f919d09dcb09e838829436da63a6ae6052333af72b453015204bac4d
-
Size
4.7MB
-
MD5
73cf2824c23b625d11debf4370540b9f
-
SHA1
8b66acaf374db86456f161df033a4d363879b70a
-
SHA256
94a881c6f919d09dcb09e838829436da63a6ae6052333af72b453015204bac4d
-
SHA512
7dd5c0fc3f93f8f82e37195bbb76111ba0804a109d63e68f33f7591ce4262051b576c970ccbbec676603e6ec8b9826a3eb4f9fe9c4c21902243613d8ed58e583
-
SSDEEP
98304:1YbVvYF3gpseAt4eJEvIdkef39JNZAw85NBJ:1YbVwF2Qt4GEvIdkeftJNZA9l
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
94a881c6f919d09dcb09e838829436da63a6ae6052333af72b453015204bac4d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE