Behavioral task
behavioral1
Sample
4039829ab29b4aacac9ffe94da1df04b54be983c486406d5eec18878cceb201d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4039829ab29b4aacac9ffe94da1df04b54be983c486406d5eec18878cceb201d.exe
Resource
win10v2004-20230915-en
General
-
Target
4039829ab29b4aacac9ffe94da1df04b54be983c486406d5eec18878cceb201d
-
Size
2.4MB
-
MD5
d859f4870040a6d0c98f175014369a96
-
SHA1
1e92e220038831ddcb7c39c124bdfdea01e22d09
-
SHA256
4039829ab29b4aacac9ffe94da1df04b54be983c486406d5eec18878cceb201d
-
SHA512
2f59553f811f734a5c58184ebcc14f6572bc581ac79d5a81a23deca4168e3cd11bfd7d5ae299d09473b757ac098b580f6e3fba554c41f6e14e7597d76123a132
-
SSDEEP
49152:grvrgS+fOir2RaSmjvjCq9a1CyxuGF6ytBhuHZzRwZb0WjEww6bn6L8S:gXh+fgaSAC+a1CyoGFdB4zRtWT6l
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4039829ab29b4aacac9ffe94da1df04b54be983c486406d5eec18878cceb201d
Files
-
4039829ab29b4aacac9ffe94da1df04b54be983c486406d5eec18878cceb201d.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE