Behavioral task
behavioral1
Sample
f2a2ac14e4e7d0d10a0699f4e426401307ffbc0c6cbafb2ee6de9f269ec46eef.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f2a2ac14e4e7d0d10a0699f4e426401307ffbc0c6cbafb2ee6de9f269ec46eef.exe
Resource
win10v2004-20230915-en
General
-
Target
f2a2ac14e4e7d0d10a0699f4e426401307ffbc0c6cbafb2ee6de9f269ec46eef
-
Size
2.2MB
-
MD5
f8fe13644c7985158fa7acf2605eb54a
-
SHA1
2143136474b6406106ddfebcbe533e8b2773b36e
-
SHA256
f2a2ac14e4e7d0d10a0699f4e426401307ffbc0c6cbafb2ee6de9f269ec46eef
-
SHA512
822b3a8d4b1638543dfc7c202fc832dea50e38bf91012a0efc3eefe4794c429193c60d355bb456b792435d32e893955d3cbe594bc093ad25754766ad561195d7
-
SSDEEP
49152:grvrgS+fOir2RaSmjvjCq9a1CyxuGF6ytBhuHZzRwZb0WjEww6bn6L8k:gXh+fgaSAC+a1CyoGFdB4zRtWT6X
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2a2ac14e4e7d0d10a0699f4e426401307ffbc0c6cbafb2ee6de9f269ec46eef
Files
-
f2a2ac14e4e7d0d10a0699f4e426401307ffbc0c6cbafb2ee6de9f269ec46eef.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE