Behavioral task
behavioral1
Sample
a6f8484aa651721ff77188874b54e65b3dd5e3efe138030c138131f8b13d9aa7.exe
Resource
win7-20221111-en
General
-
Target
a6f8484aa651721ff77188874b54e65b3dd5e3efe138030c138131f8b13d9aa7
-
Size
1.1MB
-
MD5
b262d5956235648bf3d42cd2d53976be
-
SHA1
bfd1a57633c14934d52bf9397a33c45f3f250e16
-
SHA256
a6f8484aa651721ff77188874b54e65b3dd5e3efe138030c138131f8b13d9aa7
-
SHA512
2afb2f5b9e6e7b49e0f7dac351845e06c18d64b84357b6ace133474d4309ad28a374d457df5ec16d853932db2c8ee3b7f3f461b233531af01c16ff59dff6c646
-
SSDEEP
24576:rQeyd5RrHevPY9QQAQnDqbJXSIJw/spzl4saKW+w51EP3W6YCO:rQeyd5RrLqbJ7mQzl4sabuPG6YC
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
a6f8484aa651721ff77188874b54e65b3dd5e3efe138030c138131f8b13d9aa7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE