Behavioral task
behavioral1
Sample
03c606e318f2954586aa20274b2ea9733fdc5f6c10b8e2372216f8c71c4e7205.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
03c606e318f2954586aa20274b2ea9733fdc5f6c10b8e2372216f8c71c4e7205.exe
Resource
win10v2004-20230703-en
General
-
Target
03c606e318f2954586aa20274b2ea9733fdc5f6c10b8e2372216f8c71c4e7205.exe
-
Size
1.2MB
-
MD5
5d3b0487920d9658063cd3d7f4b1fcac
-
SHA1
5233349326ca6d69b32819091255709f84088a14
-
SHA256
03c606e318f2954586aa20274b2ea9733fdc5f6c10b8e2372216f8c71c4e7205
-
SHA512
6e2a5588ffc5498ffbb52035ef93aa1ba20d388dfa5ce6b7e1f03e50fffb10c7941063fdec8c4161fb2ab7e7e5e6ebfb487509cfd1b13c5ca5efb778391bf65b
-
SSDEEP
24576:tOjVxxl3D0M5OBdcqeTxes0W2OC24/NnPFky127TuPEjQOVD4COpDCDZ:UxxDx5Wc0Z5OTwpWy12PuPGV0COpDCl
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03c606e318f2954586aa20274b2ea9733fdc5f6c10b8e2372216f8c71c4e7205.exe
Files
-
03c606e318f2954586aa20274b2ea9733fdc5f6c10b8e2372216f8c71c4e7205.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE