Behavioral task
behavioral1
Sample
ff68eeddf23e85a5c97683d75ba8f4fabf6d14669a233448327d9719dc31dfdc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff68eeddf23e85a5c97683d75ba8f4fabf6d14669a233448327d9719dc31dfdc.exe
Resource
win10v2004-20220812-en
General
-
Target
ff68eeddf23e85a5c97683d75ba8f4fabf6d14669a233448327d9719dc31dfdc
-
Size
1.2MB
-
MD5
ac8350bdfd6c2efb2aa7376c7d2baf8a
-
SHA1
8bb4d2213f56a599f6e73c900e3064e4517261e7
-
SHA256
ff68eeddf23e85a5c97683d75ba8f4fabf6d14669a233448327d9719dc31dfdc
-
SHA512
a3d8caa3a5783c8531c11709c3eace70072e92c0f9910da460e6d9cc1a343c6e01b6f7dab637e4beb1b1267a3db0dede567a438ccb5c2a8dc804666e93780b47
-
SSDEEP
24576:lzhM6+SgDvQdFYWLqsFvHupee3oSXzCX1FqjMz8Ae:FW6+frQd1zWpdoIzqFAAe
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ff68eeddf23e85a5c97683d75ba8f4fabf6d14669a233448327d9719dc31dfdc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE