Behavioral task
behavioral1
Sample
b91ca1e036982cf8462649571b05bb92b70ab9437ea2e1be328116b6820c48d8.exe
Resource
win7-20231020-en
General
-
Target
b91ca1e036982cf8462649571b05bb92b70ab9437ea2e1be328116b6820c48d8
-
Size
5.1MB
-
MD5
c269d67269ecaaf4e8938c8d4ed0a914
-
SHA1
715d7b31627cd06d5e2c752f2fc8385e5dc844ad
-
SHA256
b91ca1e036982cf8462649571b05bb92b70ab9437ea2e1be328116b6820c48d8
-
SHA512
89807d5d8a7667ede381df77b893f1dfdd7409c870f9dfa388ca9c6607db72c44d8a3d73278dad009f9cf4105681796712c7665f4dc6b6309df592be326a7822
-
SSDEEP
49152:+vpLXpXSj/yOZAOurKe7Mw2ZngDmTmk9c3iADYMYLCXAOn9:+VXpX+3AOurpX2ZngD6a5YFLzOn9
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
b91ca1e036982cf8462649571b05bb92b70ab9437ea2e1be328116b6820c48d8.exe windows:4 windows x86
Code Sign
52:7c:4d:02:12:39:1b:8b:4c:fa:56:9e:4b:33:28:91Certificate
IssuerCN=Sony SEL-55210 55-210mm F4.5-6.3Not Before23/07/2021, 12:06Not After24/07/2031, 12:06SubjectCN=Sony SEL-55210 55-210mm F4.5-6.339:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
56:b3:80:51:1f:25:f0:43:8e:93:61:9d:77:e0:04:11:3d:1d:2f:24:bf:32:99:e2:b7:c3:20:47:0d:c6:59:f3Signer
Actual PE Digest56:b3:80:51:1f:25:f0:43:8e:93:61:9d:77:e0:04:11:3d:1d:2f:24:bf:32:99:e2:b7:c3:20:47:0d:c6:59:f3Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 69KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 499KB - Virtual size: 498KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE