Behavioral task
behavioral1
Sample
62fefba299de186ec1c6db0fce69fee4.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
62fefba299de186ec1c6db0fce69fee4.exe
Resource
win10v2004-20231020-en
General
-
Target
62fefba299de186ec1c6db0fce69fee4.exe
-
Size
480KB
-
MD5
62fefba299de186ec1c6db0fce69fee4
-
SHA1
e534caba7f20f33cdcd1d885be43d046c63e2d3d
-
SHA256
a67fbbab953445f8609e6859844e5ee98f92d8c1d58b9e4fc8fd557798e6dd22
-
SHA512
711da87fed6b5bc26108d4c66ef56fc4622336f8095718155e542d1b5e4ae3ce2fcec2e2849c88a977ab62d2bce0f95ddae9ff269c43c8165c0429efd5434ad9
-
SSDEEP
6144:PqQ2Hfzhwl1SBg9+4Ep1oX0RPFYSACkNLe8sQfsEWgkh4EOLIiDOmBpTBeLX70ld:ywSBBi2FYS/8EVgk0MDmB3eL7eB
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62fefba299de186ec1c6db0fce69fee4.exe
Files
-
62fefba299de186ec1c6db0fce69fee4.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 69KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 26KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ