Behavioral task
behavioral1
Sample
SirHurt V4.exe
Resource
win7-20230831-en
General
-
Target
SirHurt V4.exe
-
Size
10.8MB
-
MD5
7c3571a7144ec0c26d3a9d79372fff35
-
SHA1
3296d8dce9241321c67a16345c58258d53aa5853
-
SHA256
22e8e3d7e060d661f3d7aa3a8c1161c79ae82da32cee3b8c2c9786fb2e850da1
-
SHA512
50a94bb2cef96f31c3be268ba5680f24a94759279ac586f322fe2efb064f5fc2801dbd44735b22908b6f5f0752b9b2b67e3cbba52dda3a3f6279bb221ca2e5af
-
SSDEEP
196608:P8LSXPcSJFDBB7XDx0YVtL4Y4KPXulDpCiC1iGxukZw3SKVr8XGm:ThTXt0YV14kW1GiG1ZwCKOG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SirHurt V4.exe
Files
-
SirHurt V4.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7.4MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 22KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ