Behavioral task
behavioral1
Sample
Circuit.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Circuit.exe
Resource
win10v2004-20230220-en
General
-
Target
Circuit.exe
-
Size
18.6MB
-
MD5
4c7628468fab9ebe4b3e025f2d7ca31a
-
SHA1
46f735e4b62a55732f91201c102f471d836163f8
-
SHA256
5e9fd35bf6f3d96bf9e30682d87501a73cf5614788ed53deee54c6f8c69dba6c
-
SHA512
3f4341671f01037e11391419d8ae9168f68435de669f5eea189dc710b6aa43f4e834cb5a59ab1e0699e9dccebd43d87da64c73f35cc3c5dcc1ea6813635f5f6a
-
SSDEEP
393216:bQSl6mgVRBnT8QoNjWU1ROUWzNsIfnoRIwLdArq230lfVuPlHp1+hKopFm:HsmgVHnT8QoNyU1ROUWVojLdArq2EfcW
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
Circuit.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 227KB - Virtual size: 434KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 40KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 98KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ