Behavioral task
behavioral1
Sample
09ed451f75b61dbd4edf1247da0a9e696a7a22ba7d11ba0ef0311655cc06967d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
09ed451f75b61dbd4edf1247da0a9e696a7a22ba7d11ba0ef0311655cc06967d.exe
Resource
win10v2004-20230915-en
General
-
Target
09ed451f75b61dbd4edf1247da0a9e696a7a22ba7d11ba0ef0311655cc06967d
-
Size
2.2MB
-
MD5
b4e25273ea0f5d73cf579acee81ee6c5
-
SHA1
5b0d38d049963d71a5441e0bee9da014299baf9a
-
SHA256
09ed451f75b61dbd4edf1247da0a9e696a7a22ba7d11ba0ef0311655cc06967d
-
SHA512
eb0ed4decd9123f7672571be6b07a367f604c20095d1aa342346c923ace55831769ea2e632ba937f35b1b73a8f728d4d3b4b9145afaf6cf2f06b90425fd0d9cd
-
SSDEEP
49152:grvrgS+fOir2RaSmjvjCq9a1CyxuGF6ytBhuHZzRwZb0WjEww6bn6L8Z:gXh+fgaSAC+a1CyoGFdB4zRtWT6W
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09ed451f75b61dbd4edf1247da0a9e696a7a22ba7d11ba0ef0311655cc06967d
Files
-
09ed451f75b61dbd4edf1247da0a9e696a7a22ba7d11ba0ef0311655cc06967d.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE