Behavioral task
behavioral1
Sample
fa2892dc143626c35782af33f43520b1980e4b1affddb244df88be39d425da19.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fa2892dc143626c35782af33f43520b1980e4b1affddb244df88be39d425da19.exe
Resource
win10v2004-20221111-en
General
-
Target
fa2892dc143626c35782af33f43520b1980e4b1affddb244df88be39d425da19
-
Size
1.9MB
-
MD5
51d87ea7cfa6cc5b0a1584c5e54a4b02
-
SHA1
6c8c21154231d1e048e85cbb6107d81df5b6fe71
-
SHA256
fa2892dc143626c35782af33f43520b1980e4b1affddb244df88be39d425da19
-
SHA512
c2c968771bd3ff27b2af8e9346b9a17aa04fe0f214da584cd6849854137eef3820f9f2139ebbfc8ff0ad7c2d4a211db6dccd142a81a6b91332a122baefa4b496
-
SSDEEP
49152:sP359xcEXd5lWfojfR+vYVtCYc1tYGdAVwNm:sPZDNACf+6e1aqrm
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
fa2892dc143626c35782af33f43520b1980e4b1affddb244df88be39d425da19.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.8MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE