Behavioral task
behavioral1
Sample
ef5d62c583faa4455773d7a2a573feca4db14cc89b2b61c4f1343ed83fe8438b.exe
Resource
win7-20221111-en
General
-
Target
ef5d62c583faa4455773d7a2a573feca4db14cc89b2b61c4f1343ed83fe8438b
-
Size
659KB
-
MD5
16e77714af05712f6d1ad1807fbbdb84
-
SHA1
e97b5bec4686953b62a846086fed249f412f8744
-
SHA256
ef5d62c583faa4455773d7a2a573feca4db14cc89b2b61c4f1343ed83fe8438b
-
SHA512
5cec749a205b402fb488a5a5fa46e3d4d9f0c9e20b78385736a472195e9c043381193b0594b4e158e3da53cf54d61c871cc4997cf4b696054a7c9835a0d7ef15
-
SSDEEP
12288:+ivD8jmSm5Qhv4RI1EwGuK49G8WFU9sg/DiTNfXBPKSkyC9z8OInjO1G:+ivA05Qym1EJn4CFIsXnlXCmjMG
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ef5d62c583faa4455773d7a2a573feca4db14cc89b2b61c4f1343ed83fe8438b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 625KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE