Behavioral task
behavioral1
Sample
b20fc39de037ec80e51a1d1e6bd45e90a0d35bbc593f589c6109f330abe15364.exe
Resource
win7-20220901-en
General
-
Target
b20fc39de037ec80e51a1d1e6bd45e90a0d35bbc593f589c6109f330abe15364
-
Size
1.4MB
-
MD5
2f40482ef060b14c1b09c354a7b379e3
-
SHA1
1d5a40f0f319d5fb02addf2963b1884e3550e674
-
SHA256
b20fc39de037ec80e51a1d1e6bd45e90a0d35bbc593f589c6109f330abe15364
-
SHA512
8669c2321bd1d8c7183bc61df5cf723391a7025a6b0a5be076751395e315d66b9d4eb601d5a42834590224058251fb2e00daf3355d4d376a85eba095352e7ed8
-
SSDEEP
24576:pRVXwLsdjQuXe4y/8Xb4IgApOtHDVk46f3AOw82euNOoJy61GrHx/QyP0a3:LVgAtQuOG4IgAItHDqffQOwZeuNOosHj
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
b20fc39de037ec80e51a1d1e6bd45e90a0d35bbc593f589c6109f330abe15364.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE