Behavioral task
behavioral1
Sample
b2cdd63eb8172675be9e1e5cb792277a27a959b21db269a44a7fe71846dabd5f.dll
Resource
win7-20230831-en
General
-
Target
b2cdd63eb8172675be9e1e5cb792277a27a959b21db269a44a7fe71846dabd5f
-
Size
6.3MB
-
MD5
576f69b3f7daac341991af1a3cbd0c94
-
SHA1
dc801b10ef9d1a996d03c19b622c0df850ccbdcf
-
SHA256
b2cdd63eb8172675be9e1e5cb792277a27a959b21db269a44a7fe71846dabd5f
-
SHA512
58c39dfd01047594c4ae02d69e91b2a762f431f76a36151a921b33b84eed621efd4869cf2ddccb2cd05f4d373ff214b5e481622ec9deee0868aa0e4ea8dabc92
-
SSDEEP
196608:0v+vWDvECtHjWqXg4DloC1j9jJLxZqLiYwn:0mO5jWqwxC9tJLa+
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2cdd63eb8172675be9e1e5cb792277a27a959b21db269a44a7fe71846dabd5f
Files
-
b2cdd63eb8172675be9e1e5cb792277a27a959b21db269a44a7fe71846dabd5f.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 15.3MB - Virtual size: 10.0MB
Size: 17.9MB - Virtual size: 4B
���� Size: 11.0MB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
���� Size: 11.0MB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size: