Behavioral task
behavioral1
Sample
308caa7acc27197a687276deed1b860cc0b52c5c7a15e2fae3e412d96cac3aca.exe
Resource
win7-20230712-en
General
-
Target
308caa7acc27197a687276deed1b860cc0b52c5c7a15e2fae3e412d96cac3aca
-
Size
3.8MB
-
MD5
1bab27a118e599da66e67a30260a9716
-
SHA1
4272c0c6db5ad6a31a6c76ebac2f131274e4377f
-
SHA256
308caa7acc27197a687276deed1b860cc0b52c5c7a15e2fae3e412d96cac3aca
-
SHA512
278fd61e988f08c171299f8537d4d61d061ef38d566d757b36fd97fbf464a070c741cdfce26f4b5000ccb7e157d0f60ec9e1a0e4ed55f3815d73b66e5e7026a7
-
SSDEEP
98304:I+yUAHtOy4QL61zW6D/Ie5dkx4KqZvGP0/9qM+c0UWc0u/:I+y1OxN/IuOWmPIqP2Wc0u
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 308caa7acc27197a687276deed1b860cc0b52c5c7a15e2fae3e412d96cac3aca
Files
-
308caa7acc27197a687276deed1b860cc0b52c5c7a15e2fae3e412d96cac3aca.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 452KB - Virtual size: 997KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 928KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 44KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ