Behavioral task
behavioral1
Sample
7f559990e8623d29dc8104be2dd0de1a57cde16d27c8ae69bc49c950271cbe06.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
7f559990e8623d29dc8104be2dd0de1a57cde16d27c8ae69bc49c950271cbe06.exe
Resource
win10v2004-20231023-en
General
-
Target
7f559990e8623d29dc8104be2dd0de1a57cde16d27c8ae69bc49c950271cbe06
-
Size
3.7MB
-
MD5
9978655b759bc862d7283a2ecaf75bb8
-
SHA1
9007b6086979cd154740c9476f0df78b353e56f0
-
SHA256
7f559990e8623d29dc8104be2dd0de1a57cde16d27c8ae69bc49c950271cbe06
-
SHA512
26f38882a220b554fda3e6766f8a4e87f672c129101b040c81b6bc7a9d337f8fe36dbd20de674e6547c9aecacecb8644b29c476a5fc3f85b907157e82b406ded
-
SSDEEP
98304:oJIuvjGwk6kCEpOcoKnkKrJDhh5YAM+z8zZG:kIuvjGhC6oGkK97eAMh4
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f559990e8623d29dc8104be2dd0de1a57cde16d27c8ae69bc49c950271cbe06
Files
-
7f559990e8623d29dc8104be2dd0de1a57cde16d27c8ae69bc49c950271cbe06.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 470KB - Virtual size: 602KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 59KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 34KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ