Behavioral task
behavioral1
Sample
b6a78c387e89b1d6ba47e22debc375f3a1e6a2f21c2a1a8d99db55ef8cb39078.exe
Resource
win7-20231020-en
General
-
Target
b6a78c387e89b1d6ba47e22debc375f3a1e6a2f21c2a1a8d99db55ef8cb39078
-
Size
853KB
-
MD5
02edae4f0813c07575f467a320f74443
-
SHA1
8e8e7861c80b01c1122e4d4245d8062acbdccc1a
-
SHA256
b6a78c387e89b1d6ba47e22debc375f3a1e6a2f21c2a1a8d99db55ef8cb39078
-
SHA512
efc0f3ba38ba0fcae560d63a0b897d08a675939cbb52afb419ff7edc729fcabb0c4fc04968ad4cbe3dd8e6e2b1b7ca0010e174b5db226a3e18d71f9e94067b55
-
SSDEEP
12288:S1hVi8f6EpWxwxW1B+zMZJe4b/AzD/IoMMUzxUrVgvrmrXwErqH3G:6hpfBlsf+7i/KIoMMUz+qazdrqH2
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6a78c387e89b1d6ba47e22debc375f3a1e6a2f21c2a1a8d99db55ef8cb39078
Files
-
b6a78c387e89b1d6ba47e22debc375f3a1e6a2f21c2a1a8d99db55ef8cb39078.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 852KB - Virtual size: 869KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE