Behavioral task
behavioral1
Sample
14960898c1d93223a3a32e7ae886e693e178ec0b2ee6ba23821bdd966fa8c4ed.exe
Resource
win7-20230831-en
General
-
Target
08bdc43521f668dcb513e885229c1882.bin
-
Size
2.6MB
-
MD5
5880ca94ce07ba4dbdbf92a9e06d3b9e
-
SHA1
86287f19694f914b783bf853ca013d58aa808858
-
SHA256
8163ae757f2b2e8291fe28e1bf43067aee1fe3c00b402dc2d1b9f3d8e5286c6f
-
SHA512
05a478933e84e711e26f8022f249ecb5fb66c69c24710774542bfb206f9f12922840d60f5b7f89bde75da345ce3855b40aba5e18d2843e3389396f0192105311
-
SSDEEP
49152:yIZXuMiXSHyplVpJ32TCsq+xTlSEbKcjQxcGwzIlzIM2w6wZXxEn6C7:lXuMiXSHOn32WsbxYONQSGwzIl8M2wDw
Malware Config
Signatures
-
resource yara_rule static1/unpack001/14960898c1d93223a3a32e7ae886e693e178ec0b2ee6ba23821bdd966fa8c4ed.bin themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/14960898c1d93223a3a32e7ae886e693e178ec0b2ee6ba23821bdd966fa8c4ed.bin
Files
-
08bdc43521f668dcb513e885229c1882.bin.zip
Password: infected
-
14960898c1d93223a3a32e7ae886e693e178ec0b2ee6ba23821bdd966fa8c4ed.bin.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 269KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 118KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ