Behavioral task
behavioral1
Sample
huh.exe
Resource
win7-20230831-en
General
-
Target
huh.exe
-
Size
7.2MB
-
MD5
fa3eb1e3f88c3c00e0c84bca5da969d5
-
SHA1
bf33fcf68441ed1c1b7078152734a5c19a136ba6
-
SHA256
11243fd54f315f52f4c21f70c9e349081fa9e83026afb94eb13c664d61855826
-
SHA512
f4539f8e71bd0df63b8ca668dfa357b2cc6a89c1b1010eaa1830ee733a7e71335b839f92b2635dda0a1555caaab7e75a8277d4810b2dfd03b5df027d68e89a12
-
SSDEEP
98304:Fb78eMEB61+Qzu/p0Xhlbj52/520APRPRNZnSf0N02m3:Fb78lEB61bu/p0X8B20AVRnG0N05
Malware Config
Signatures
-
resource yara_rule sample themida -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource huh.exe
Files
-
huh.exe.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE