Behavioral task
behavioral1
Sample
9c34b55b414ffbbdf7d099607f4ba6a03389aaea46dea32f16a5ccf37f559658.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9c34b55b414ffbbdf7d099607f4ba6a03389aaea46dea32f16a5ccf37f559658.exe
Resource
win10v2004-20230703-en
General
-
Target
9c34b55b414ffbbdf7d099607f4ba6a03389aaea46dea32f16a5ccf37f559658
-
Size
4.6MB
-
MD5
0aa8191e8bfdb536b100700589a0e018
-
SHA1
dad712352b4219ae03f1135c236ff406a64fe3af
-
SHA256
9c34b55b414ffbbdf7d099607f4ba6a03389aaea46dea32f16a5ccf37f559658
-
SHA512
69e85b5ebb32e040c3c849bf74f6e4ceac50ffbc26db9e08b015a20b2010d09fd085fd5dbc0862b35d358aa1d5552c02932575670ca16e303f31c92261a81654
-
SSDEEP
98304:+rwAHkh6EjGXUBy1UP7DR+RcIORebUmc+J3eFhEseli06SmsyF9Xe1dDm:+rwAEhZKhUzDR5+E3Ilj6SoCQ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c34b55b414ffbbdf7d099607f4ba6a03389aaea46dea32f16a5ccf37f559658
Files
-
9c34b55b414ffbbdf7d099607f4ba6a03389aaea46dea32f16a5ccf37f559658.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 994KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 50KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 345KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 60B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 66KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 620KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ