Behavioral task
behavioral1
Sample
c58609fdf3dfa76ca7a65a30c8d76a57f2418aa54cc18d4aba574d618c59a5c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c58609fdf3dfa76ca7a65a30c8d76a57f2418aa54cc18d4aba574d618c59a5c4.exe
Resource
win10v2004-20220812-en
General
-
Target
c58609fdf3dfa76ca7a65a30c8d76a57f2418aa54cc18d4aba574d618c59a5c4
-
Size
316KB
-
MD5
22a7b3163996cc4928c0147706544167
-
SHA1
89302fd7d0af4e084fe54975a89ac8c1b741a077
-
SHA256
c58609fdf3dfa76ca7a65a30c8d76a57f2418aa54cc18d4aba574d618c59a5c4
-
SHA512
1c74d1ffaa39b9441566104e089dfb585e33f098325c9ee0fde2dd1ebb1e39d703ffdb7960b156c7029cd27610b56f34d80bfc92a0b9f7f7a622461d01742495
-
SSDEEP
6144:V+UdvH/XwGC0HVluYEW0AXbmk4dK5YF3STcuMuUN4T8InHNRdn02rXgxbRV1drXN:V3JH8ZV6JVEGO
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
c58609fdf3dfa76ca7a65a30c8d76a57f2418aa54cc18d4aba574d618c59a5c4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Themida Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE