Behavioral task
behavioral1
Sample
10d554091a75a28d4bdb7269c0999c5d79c48739a2a382f6e13d5fd9a7a412dc.exe
Resource
win7-20230831-en
General
-
Target
10d554091a75a28d4bdb7269c0999c5d79c48739a2a382f6e13d5fd9a7a412dc
-
Size
3.4MB
-
MD5
3b1fc8d77470a65c7b2f44e5859c5fe5
-
SHA1
da12b52e9c843284dcb0088fc76f41b67f8adf3f
-
SHA256
e275fb80c1b7dddec9e8bbb7ce771ce6a09b8e880db7c8f2d8547a79aca23918
-
SHA512
b2087b8bd7989c085b4301b638d562ab7fad3a7874ac6f75970201bef29c751d6e80885f1c0d580a7efaeed1caf3c24bfa74f989b393af956745af1d49fce4c5
-
SSDEEP
98304:mWoz95vq28HVaKCJj1z2ge+u/3qXuD5OxBBkyWBh:RQZyahJ4g3uPIuFKayu
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
10d554091a75a28d4bdb7269c0999c5d79c48739a2a382f6e13d5fd9a7a412dc.exe windows:4 windows x86
Code Sign
d1:8f:87:aa:c2:f7:5c:47:89:e7:5a:bf:55:62:eb:18Certificate
IssuerCN=BenQ Mobiuz EX240N 23.8,OU=HDR Flicker-Free,O=AMD FreeSync Premium,L=±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥,ST=GB,C=United KingdomNot Before20/09/2023, 15:49Not After27/06/2025, 00:00SubjectCN=BenQ Mobiuz EX240N 23.8,OU=HDR Flicker-Free,O=AMD FreeSync Premium,L=±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥±¥±ð±Ÿ±§±Ÿ±*±Â±¥±Å±É±♀±️±®*¥💆*¥🏼*±¥±♂±️±*±¥±👬±*±¥±👩±®±*🧟*‡Â¥ÅÉ¥❤️‡*¥👩*¥👩*®¥👩‡ðŸ§Ÿ*Â¥ÅÉ*¥👧®*¥👧🧟*Â¥ÅÉ*¥👩*¥‡👩®*¥👧*¥👦*¥‡👠‡*¥,ST=GB,C=United Kingdom39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3a:7c:85:74:84:78:08:4a:c1:34:d3:3c:90:23:92:68:7c:92:2b:bf:c5:50:f7:ae:af:cd:17:1f:f8:cc:ff:60Signer
Actual PE Digest3a:7c:85:74:84:78:08:4a:c1:34:d3:3c:90:23:92:68:7c:92:2b:bf:c5:50:f7:ae:af:cd:17:1f:f8:cc:ff:60Digest Algorithmsha256PE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.5MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ