Behavioral task
behavioral1
Sample
944d8522a27b3bb6d745eadb8756ba71928cdc1a23b9237e0e52ba7fa9a3a57c.exe
Resource
win7-20221111-en
General
-
Target
944d8522a27b3bb6d745eadb8756ba71928cdc1a23b9237e0e52ba7fa9a3a57c
-
Size
714KB
-
MD5
b03f720cbbc5f8ee8f679b158fcb6386
-
SHA1
3d59eac2f2e2c82660827d0ca4c7fd6bb19c8e15
-
SHA256
944d8522a27b3bb6d745eadb8756ba71928cdc1a23b9237e0e52ba7fa9a3a57c
-
SHA512
1765854aabbaa6794021445099f0eeae84a3b9ba21fa4b871fe21aba1dc35db2b2414cc6aaa1e33d2a0e54705dc844523c7471f35beb9d899bebd38ed2fbe156
-
SSDEEP
12288:zsyh4WlI1KjvSMcl7v3PljnPEJ8ahLxkt/FJWPamuonmmG92yozhjxkeb5EiZg:zso44I1Nnv3P9nOva7JWSG5G92Jxb5du
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
944d8522a27b3bb6d745eadb8756ba71928cdc1a23b9237e0e52ba7fa9a3a57c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 682KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE