Behavioral task
behavioral1
Sample
d5bddbbbf64a97dc0e98d4db2b675fb3.exe
Resource
win7-20230712-en
General
-
Target
d5bddbbbf64a97dc0e98d4db2b675fb3.exe
-
Size
2.7MB
-
MD5
d5bddbbbf64a97dc0e98d4db2b675fb3
-
SHA1
aeef4f429b68100f46f4a91000b7d593f0ef1462
-
SHA256
8a6e1479d2efdd7ef244c34512a6a8b9c23df2b86374641a07473e4f00f5b457
-
SHA512
1f451f7ec3d157756687049ec893aff1997cff60797af33c6209782058b2414c8c77976444928c4d3922db5e4126843f8f99729cbf348c78a9f6c78437d121aa
-
SSDEEP
49152:FQ1ePnjF0mHcIhQHDYtgya/O9gLxuze5qqVAc/NSIsTCvNm+ov2jiCJEmLahm7HM:HbFN8Ie5O9gLxuGq6nNuGvNmXu+CFahL
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5bddbbbf64a97dc0e98d4db2b675fb3.exe
Files
-
d5bddbbbf64a97dc0e98d4db2b675fb3.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 269KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ