Behavioral task
behavioral1
Sample
ac95f5ec06205f0a188b025b42c5a4776dce708189c97d8db7f7ed6c761d275f.exe
Resource
win7-20230831-en
General
-
Target
ac95f5ec06205f0a188b025b42c5a4776dce708189c97d8db7f7ed6c761d275f
-
Size
3.3MB
-
MD5
edea8c880f50252b6db33025ff2b3b3b
-
SHA1
0dc26f5d16a0d7234ed314dc0830b49ae485c06e
-
SHA256
ac95f5ec06205f0a188b025b42c5a4776dce708189c97d8db7f7ed6c761d275f
-
SHA512
40d57b6011f8e3c56a97c9cbb062a968ddb940b24b74e686069e8c61c24ded6b97280130a0a9a00593b2ef857bc0b00c6d6fe63c04a8e85fba1bf46ed9ee66cd
-
SSDEEP
98304:uSBX3E2lVeI6zjEkzUWhsaW11SgJe33sBEZySjtsG:uSV3FzebJzMaW11Q33sBEoSjJ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac95f5ec06205f0a188b025b42c5a4776dce708189c97d8db7f7ed6c761d275f
Files
-
ac95f5ec06205f0a188b025b42c5a4776dce708189c97d8db7f7ed6c761d275f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 477KB - Virtual size: 982KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 269KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 45KB - Virtual size: 558KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ