General
-
Target
262e90c269d9e14ffd85c28b4d13793daf3f6fb45a8dad07a73be091376adacb
-
Size
3.1MB
-
MD5
0c2f5ded9cb6a46f070bda0c18509c1e
-
SHA1
ee0f259887b4bdd125f429106e3457988187dd33
-
SHA256
262e90c269d9e14ffd85c28b4d13793daf3f6fb45a8dad07a73be091376adacb
-
SHA512
44555fb1f1d638033a82e5f06d83776efc3bd9d0a215b1e0a4bf8221b2b256d85060c4327946b426464f6a48cc88b4897738ac564834189e1cc30dec996c83ae
-
SSDEEP
49152:L/B1Ci1WvFpI4fsnEH8rZhjRP29qZBuve3FEaRq3AZ99F001Wp5w2PIHS:LK9+4sn9hjROIP/BRq3AH97WpNPu
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 262e90c269d9e14ffd85c28b4d13793daf3f6fb45a8dad07a73be091376adacb
Files
-
262e90c269d9e14ffd85c28b4d13793daf3f6fb45a8dad07a73be091376adacb.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 621KB - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 59KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ