Behavioral task
behavioral1
Sample
9007fc3920f1e32141381c8f36ae7787f95f206c9ad1b50bd8d284d46a530b5f.exe
Resource
win7-20220812-en
General
-
Target
9007fc3920f1e32141381c8f36ae7787f95f206c9ad1b50bd8d284d46a530b5f
-
Size
566KB
-
MD5
9d5818bcf61b11e21e058b9c44883774
-
SHA1
2b463dfe9d9a8c799aa0fe613d483308518362e1
-
SHA256
9007fc3920f1e32141381c8f36ae7787f95f206c9ad1b50bd8d284d46a530b5f
-
SHA512
e089af9a7d3b22b44da6f890df2fad40c7c97cd8bc0306020a2d6fc3a71aca415925fc2ec1ee706de7b8d9823c5013050d1a959df08603b0973d25d19e777ec6
-
SSDEEP
12288:O3/l/SGScKMfzk2U45BF4vM6iMSb8Ut2Ckj:OvlanD345svMZ8zR
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
9007fc3920f1e32141381c8f36ae7787f95f206c9ad1b50bd8d284d46a530b5f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 29KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 532KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE