Behavioral task
behavioral1
Sample
7a2d2e9abdd5d210007969efc6ad1bbec322329253895fd09b60d9d118e03129.exe
Resource
win7-20230712-en
General
-
Target
0cb74296cc79ff0a20f5046f8e80d7b0.bin
-
Size
2.4MB
-
MD5
933d99a202572f7bbc32cde54bf782de
-
SHA1
b888a9c3849aa395132a248ba9d67d820ca64390
-
SHA256
4a7f62b7482c85d3225a474234513ea93eeb68692417724e31324f5297bdb19a
-
SHA512
9d88bb7e810d490a56945b5a948d0e3ec1e69430f6e7c832126405b57e53ca0e9c0b08e9168b7b0ff2cdc40f37894a304df779e2905a40e629ee7d91546dc245
-
SSDEEP
49152:SIccdwxpg5jcrlSa+/uzU5fy1qKiAUTYHNAIiAfwmIkbTz6A:tu82xf+/uzYf2qKiVTMNAInjRT6A
Malware Config
Signatures
-
resource yara_rule static1/unpack001/7a2d2e9abdd5d210007969efc6ad1bbec322329253895fd09b60d9d118e03129.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7a2d2e9abdd5d210007969efc6ad1bbec322329253895fd09b60d9d118e03129.exe
Files
-
0cb74296cc79ff0a20f5046f8e80d7b0.bin.zip
Password: infected
-
7a2d2e9abdd5d210007969efc6ad1bbec322329253895fd09b60d9d118e03129.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 269KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ