Behavioral task
behavioral1
Sample
abf9f0f4aa579e88ccd7aa52590fc0218b1ef9461ae502e90d76f6b870afc0d4.exe
Resource
win7-20220812-en
General
-
Target
abf9f0f4aa579e88ccd7aa52590fc0218b1ef9461ae502e90d76f6b870afc0d4
-
Size
836KB
-
MD5
25ac466cb9325916fc4e7ff6526a07cd
-
SHA1
49ed062bfd01ddac47c1af3fb67b6e61b268ed11
-
SHA256
abf9f0f4aa579e88ccd7aa52590fc0218b1ef9461ae502e90d76f6b870afc0d4
-
SHA512
8b15c22fc0dcdae5fd297416ab0fb199c7062c27640847b76b8d8ca0b1613f9add45db538ef106300e184f2662d49f69948ddbc3a87a68ec5dd39e17f36ae3fd
-
SSDEEP
12288:Hj7YgyFvXE92p3JQN2wRYfRnhl1iV00fOKLyAsWa6aEtPweIw4aAmVBC:3YbPE92pKMQwRnhloxnLjq6vPwe4aZB
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
abf9f0f4aa579e88ccd7aa52590fc0218b1ef9461ae502e90d76f6b870afc0d4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 94KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 721KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE