Behavioral task
behavioral1
Sample
ae396926752622a6b5c5f20849854a113ff882e5dcf6a624ae5ffb23aec2d3e3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ae396926752622a6b5c5f20849854a113ff882e5dcf6a624ae5ffb23aec2d3e3.exe
Resource
win10v2004-20230915-en
General
-
Target
ae396926752622a6b5c5f20849854a113ff882e5dcf6a624ae5ffb23aec2d3e3
-
Size
2.3MB
-
MD5
53a0048e78e0afdf2f594777e946ce2d
-
SHA1
6a12b9d50f2943b8e60a9a9a1cdc82b5d30eca88
-
SHA256
ae396926752622a6b5c5f20849854a113ff882e5dcf6a624ae5ffb23aec2d3e3
-
SHA512
891bc71b228b7c9f9e392d27130071d33a821dc5a841646d0af89ce23b7cf7b15ca629b0e3db399e696facc740108968e2d729970089b8779373ae4b55b4dc96
-
SSDEEP
49152:grvrgS+fOir2RaSmjvjCq9a1CyxuGF6ytBhuHZzRwZb0WjEww6bn6L8z:gXh+fgaSAC+a1CyoGFdB4zRtWT6Q
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae396926752622a6b5c5f20849854a113ff882e5dcf6a624ae5ffb23aec2d3e3
Files
-
ae396926752622a6b5c5f20849854a113ff882e5dcf6a624ae5ffb23aec2d3e3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE