Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20221111-en
General
-
Target
main.exe
-
Size
12.9MB
-
MD5
8e886cb9fe65197444b5bd9f82994898
-
SHA1
25e03846dadd7feb9657a055fb41fcbd3215371a
-
SHA256
5e343824724d9adca8c1681b84a165caba0b596504905dc034eeb647316d51c4
-
SHA512
620f3b09b84124a64a6a208cde8508ed843a9c593e11f3c527df41b7e64126bbdf85193e9cdab967a3194759839b5908356e81345ae953c1453bb924fd352262
-
SSDEEP
393216:A8RMQmIeVL2Vmd6mT0GzajzCw0JWv6psg4YE3Zj:A8RMJJyVmddEzL0J4DXZj
Malware Config
Signatures
-
resource yara_rule sample themida -
Detects Pyinstaller 1 IoCs
resource yara_rule sample pyinstaller
Files
-
main.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 34KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ