Behavioral task
behavioral1
Sample
ef8be4e2eee1ce9af5488ac962c4823e11f737e01e2a3c8ed96f32cc0db18fc4.exe
Resource
win7-20230831-en
General
-
Target
ef8be4e2eee1ce9af5488ac962c4823e11f737e01e2a3c8ed96f32cc0db18fc4
-
Size
3.4MB
-
MD5
20fb5e586475341f636b916b026208ff
-
SHA1
adc20cda17f7d27e37d211b28a24dd06ca7a580c
-
SHA256
24f92c883d5db4db4c8d39d41e31e6d2715fc345a5ec6433585ce38e2c2392f4
-
SHA512
41c19075c05a66df4517a0dacce8e90eee1f1dca95f71f9d598e5e88f9928459f1157fa967089e7510cb2a81a23a3e8e7728799d183ef17c39b35edb42b70e0d
-
SSDEEP
98304:mUoz95vq28HVaKCJj1z2ge+u/3qXuD5OxBBkyWBh:jQZyahJ4g3uPIuFKayu
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
ef8be4e2eee1ce9af5488ac962c4823e11f737e01e2a3c8ed96f32cc0db18fc4.exe windows:4 windows x86
Code Sign
d1:8f:87:aa:c2:f7:5c:47:89:e7:5a:bf:55:62:eb:18Certificate
IssuerCN=BenQ Mobiuz EX240N 23.8,OU=HDR Flicker-Free,O=AMD FreeSync Premium,L=±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥,ST=GB,C=United KingdomNot Before20/09/2023, 15:49Not After27/06/2025, 00:00SubjectCN=BenQ Mobiuz EX240N 23.8,OU=HDR Flicker-Free,O=AMD FreeSync Premium,L=±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥,ST=GB,C=United Kingdom39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:42:ec:f7:40:4c:2b:f9:22:70:89:09:35:41:e7:04:d6:48:15:87:6d:a2:cd:7e:c7:ed:6e:b5:9f:2f:5a:14Signer
Actual PE Digest07:42:ec:f7:40:4c:2b:f9:22:70:89:09:35:41:e7:04:d6:48:15:87:6d:a2:cd:7e:c7:ed:6e:b5:9f:2f:5a:14Digest Algorithmsha256PE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.5MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ