Behavioral task
behavioral1
Sample
e0c16c5b9d33c2f465c40611cc2767cca22a9fecb8047b9332d16904eeb01098.exe
Resource
win7-20220901-en
General
-
Target
e0c16c5b9d33c2f465c40611cc2767cca22a9fecb8047b9332d16904eeb01098
-
Size
1.3MB
-
MD5
6dd73f6307dcec93b2614bc5da238975
-
SHA1
2c341eaf0b080579d9aa8c98823bd93b921cd1ec
-
SHA256
e0c16c5b9d33c2f465c40611cc2767cca22a9fecb8047b9332d16904eeb01098
-
SHA512
be9f67f56a05260320a76f8b8ae5aa4130a3b6057e6aaced35fad465a4e9406d057a94656382ad4d98768f314fdb694c1cf307ecb057e60510fc77ce35d3dd4d
-
SSDEEP
24576:V4PHFz4Vjc6wFym29INeWoi/D13677T+1PZoOE5:ElzRF+IYyaT+1PZoOE5
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
e0c16c5b9d33c2f465c40611cc2767cca22a9fecb8047b9332d16904eeb01098.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE