Behavioral task
behavioral1
Sample
d7bce66a292178f5c57742b3a824cebd5825fe8fdcfcbb121a358d93b1693497.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7bce66a292178f5c57742b3a824cebd5825fe8fdcfcbb121a358d93b1693497.exe
Resource
win10v2004-20220812-en
General
-
Target
d7bce66a292178f5c57742b3a824cebd5825fe8fdcfcbb121a358d93b1693497
-
Size
1.2MB
-
MD5
877f8cb77f3ab040d907f6d5e348a60d
-
SHA1
6f0cb45758b41384b88813f46a90ef21f2c38d0d
-
SHA256
d7bce66a292178f5c57742b3a824cebd5825fe8fdcfcbb121a358d93b1693497
-
SHA512
6e92de0e297079dd136d1129de78269af7f46e1313cc033acf3e1c54b008b1c588610d30e21d5978cfb4318ef51b2397651a512140510631d892461f1cc4ecb3
-
SSDEEP
24576:NOTqzz7kg6hO+qh20ltbePtHmmHfQ9EwLumm42M:QLvhX0lt+tGsfcnLumt2
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
d7bce66a292178f5c57742b3a824cebd5825fe8fdcfcbb121a358d93b1693497.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE