Behavioral task
behavioral1
Sample
b859d7a5901e25af0a1bd1d8880d6d8908a404a386bdcbf3dedde9cc41f6c2ec.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b859d7a5901e25af0a1bd1d8880d6d8908a404a386bdcbf3dedde9cc41f6c2ec.exe
Resource
win10v2004-20221111-en
General
-
Target
b859d7a5901e25af0a1bd1d8880d6d8908a404a386bdcbf3dedde9cc41f6c2ec
-
Size
2.4MB
-
MD5
a62ed50535c47cb04b1b507ba4f047c7
-
SHA1
5def2efe41491e49c7dfe805819a5d2c009c2a25
-
SHA256
b859d7a5901e25af0a1bd1d8880d6d8908a404a386bdcbf3dedde9cc41f6c2ec
-
SHA512
714c73853d91dfaa9f716589f965e3c800fa1fa325c10e8cc5013cd1b1ec997c2b7c02328cb076e427fbb8a79031a8e25572fead17f283f24ee652724b01439e
-
SSDEEP
49152:uFAyT+QS4ZliN9RoYSBAOJMtR2zAhNrwOn2dJiIeAB6dWI1ND4qanal901b4:6AbQS4ZmkLBV8R2EhNrwOn2dJiIeAB6d
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
b859d7a5901e25af0a1bd1d8880d6d8908a404a386bdcbf3dedde9cc41f6c2ec.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE