Behavioral task
behavioral1
Sample
858f80c7836968dcb557493ab59f6d6a65c375180a79fc3f6af7b9fa78e2932e.exe
Resource
win7-20230831-en
General
-
Target
858f80c7836968dcb557493ab59f6d6a65c375180a79fc3f6af7b9fa78e2932e
-
Size
2.4MB
-
MD5
dfab7b3f5fcb32fc90745244306f3427
-
SHA1
49d498393210a02a9761f915811713a9a549ad8e
-
SHA256
858f80c7836968dcb557493ab59f6d6a65c375180a79fc3f6af7b9fa78e2932e
-
SHA512
bb8e7f467c7a4a3f12a9b455b0a8b247b141817f81f5a105e3054a3f118d542072eee0ec31fe59d39fb73521778fd246c13527981349fdc4e0c79406a7bc4c97
-
SSDEEP
49152:rPSoTi1yXaALSFHHIYnNachKnTXC8JH+mzlDs01k97vaOmsQg1Hi:JG1yLLSBHIYUcIjC8/5Q8y7va7RKi
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
858f80c7836968dcb557493ab59f6d6a65c375180a79fc3f6af7b9fa78e2932e.exe windows x86
Code Sign
52:7c:4d:02:12:39:1b:8b:4c:fa:56:9e:4b:33:28:91Certificate
IssuerCN=Sony SEL-55210 55-210mm F4.5-6.3Not Before23/07/2021, 12:06Not After24/07/2031, 12:06SubjectCN=Sony SEL-55210 55-210mm F4.5-6.339:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
98:42:1f:11:8d:ba:52:20:67:70:a4:77:45:71:02:87:11:9f:21:60:68:a3:c4:53:f6:85:a7:67:b5:00:18:3aSigner
Actual PE Digest98:42:1f:11:8d:ba:52:20:67:70:a4:77:45:71:02:87:11:9f:21:60:68:a3:c4:53:f6:85:a7:67:b5:00:18:3aDigest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 269KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 103KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ