Behavioral task
behavioral1
Sample
933dbcc0d932f5b971a2932212581507510169b9c6dae1bbef5a241306ee5567.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
933dbcc0d932f5b971a2932212581507510169b9c6dae1bbef5a241306ee5567.exe
Resource
win10v2004-20220812-en
General
-
Target
933dbcc0d932f5b971a2932212581507510169b9c6dae1bbef5a241306ee5567
-
Size
2.3MB
-
MD5
e7518b2f63f1e28e852ababbaff5370b
-
SHA1
34b3a24a6fea1b530cf6818b4e7d605c87f34eda
-
SHA256
933dbcc0d932f5b971a2932212581507510169b9c6dae1bbef5a241306ee5567
-
SHA512
ca6e94c1be0218349dcc2f8df2f46dadb232249bc0d466f4b09ff6732b7da105e386a21fe60d1f2e16cab81aa638af1a4b1473bc59f3900d07a2b929b406a5b9
-
SSDEEP
49152:Pww5MeYYbBXwnD8Dgtia7Wqc7CKiYLH8ffNXVmVjavqc:Yw5MeYYlADsii4WIWLa1Xajayc
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
933dbcc0d932f5b971a2932212581507510169b9c6dae1bbef5a241306ee5567.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE