Behavioral task
behavioral1
Sample
acbe6f6a2665c9b2cc9997d67f4b367c696062d24798c1e9be68aab21fe6215d.exe
Resource
win7-20221111-en
General
-
Target
acbe6f6a2665c9b2cc9997d67f4b367c696062d24798c1e9be68aab21fe6215d
-
Size
632KB
-
MD5
01f1eadc0a7319e77c07f028bc2a1d9a
-
SHA1
5f7818a1fb2ad6bcc8a54f5d14dba292f19c983f
-
SHA256
acbe6f6a2665c9b2cc9997d67f4b367c696062d24798c1e9be68aab21fe6215d
-
SHA512
7fe276eeff7a2c8c1209dee509ccd6e169aeff05b69c658466e73a4031c44dd650ea625354f5fc25553c46d6d3e584cce1676e082e16d03aa2339ea6c98acb65
-
SSDEEP
12288:7FbykZuxF18RtiEl30zpDUldIH0Rya/k120yT9jN+gXaHKaax4Fmwp03j:7F1iF18Rtia3EpDUkURy+k120ypsgqqL
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
acbe6f6a2665c9b2cc9997d67f4b367c696062d24798c1e9be68aab21fe6215d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 592KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE