Behavioral task
behavioral1
Sample
092837314630a039ea7a7f3fd25bc7e59e9f6d6c587cb446505f309a98d7331d.exe
Resource
win7-20220812-en
General
-
Target
092837314630a039ea7a7f3fd25bc7e59e9f6d6c587cb446505f309a98d7331d
-
Size
6.1MB
-
MD5
606c749fee2a6a26c7f30716b454fc53
-
SHA1
92ad54b4049a7c51c7151c37778cd0ba82bb81c6
-
SHA256
092837314630a039ea7a7f3fd25bc7e59e9f6d6c587cb446505f309a98d7331d
-
SHA512
1bbc437915344e646a2dde87bf18cae34c9ca3cc37c6f7f0795ff3aa560fab668b0a45ebaf5c62635a5c6388c5573163bf733776118191ff4073fae1c2ddedd5
-
SSDEEP
98304:gqn9gH7Xf7Esyh1qlWArVaG9bbkkngZwL8d3PAH26LYTnNrw7:gM9gHrTEsyhYzrVL5YkZLa/fhVw7
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
092837314630a039ea7a7f3fd25bc7e59e9f6d6c587cb446505f309a98d7331d.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 333KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE