Behavioral task
behavioral1
Sample
9927470d54ee7194bebce8ac122d098b1d28f16d4a72fb1353801fc329dac476.dll
Resource
win7-20220812-en
General
-
Target
9927470d54ee7194bebce8ac122d098b1d28f16d4a72fb1353801fc329dac476
-
Size
653KB
-
MD5
a25afeb21c90b19de662330d28b0f982
-
SHA1
eabb0d85fa999bc654e19278c6d408a021545b0d
-
SHA256
9927470d54ee7194bebce8ac122d098b1d28f16d4a72fb1353801fc329dac476
-
SHA512
e8f63c2294a22c2e751c8861dfcf9db68e4057b004bcc3e260880a2cde3f668e13125076ed16739da09cc0c5713e6907d61ed6cab00b340994358b22be8c64d6
-
SSDEEP
12288:WSlp5/csuPYb8/AalzBqdPxXfJY8V+fHpGYu7SY9E5i5f2CW3UH:WSlpisuPfYajqdZz8fHpGYuntBD
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
9927470d54ee7194bebce8ac122d098b1d28f16d4a72fb1353801fc329dac476.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 51KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 597KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE