Behavioral task
behavioral1
Sample
ac48dcfad63c1e1cd44965a4e5ba9e76dc7b657ee015ebb25a9be858e1ad2a96.exe
Resource
win7-20230712-en
General
-
Target
ac48dcfad63c1e1cd44965a4e5ba9e76dc7b657ee015ebb25a9be858e1ad2a96
-
Size
12.1MB
-
MD5
9d282142de0c0c1e0a9e2e1d140d4e37
-
SHA1
fdb4b7ec9c3f6900e67099cb0bedb41a7e817ec9
-
SHA256
ac48dcfad63c1e1cd44965a4e5ba9e76dc7b657ee015ebb25a9be858e1ad2a96
-
SHA512
d2ea3153eae4f32d07fe1fb24a518313af928bd5df45c0e8fb2fb22b0506e2b2f98c363103b6ef06b879114a420b8562cfddad035ab47283fc3fa279a584ede0
-
SSDEEP
393216:xHetRTb7YHqq1ifRVSkNSo1pDRzK/qVKhaJe:xHWRn7+qsKrSk0QDRzcLha8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac48dcfad63c1e1cd44965a4e5ba9e76dc7b657ee015ebb25a9be858e1ad2a96
Files
-
ac48dcfad63c1e1cd44965a4e5ba9e76dc7b657ee015ebb25a9be858e1ad2a96.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 692KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1.2MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 28KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 15.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 10.0MB - Virtual size: 10.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE