Behavioral task
behavioral1
Sample
Electron.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Electron.exe
Resource
win10v2004-20220901-en
General
-
Target
Electron.exe
-
Size
9.2MB
-
MD5
0506a791b8c9a96345c92cb487b4996f
-
SHA1
a78d466d289ad41bc42227063998dafd5305ec8a
-
SHA256
1e150c985bb32c67c6a7d2b3dc9bb46d28ebc5e1af4b090e3befaaace2009fdc
-
SHA512
5a89e35e1a50412351b2d595e388086ae34a1bee998df808e4cb667ad23025ee6f680cfa7a72f5d98b7675a6f6c5d68486dc8f65dbbcf0bdf31a829f3d2db9aa
-
SSDEEP
196608:9CMJ3w+A4MtYkVTmCuAn0YjU+3GW9Zplnv3jK29IzOb47LfkAZG6:9CMxwEMtYkVTme0YY+JPpx3jAeSQuG6
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
Electron.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1.4MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 171KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1.4MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 48KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 13.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ