Behavioral task
behavioral1
Sample
755b10dc126a9d7551cc1ff997ae7ca1.exe
Resource
win7-20231215-en
General
-
Target
755b10dc126a9d7551cc1ff997ae7ca1
-
Size
2.8MB
-
MD5
755b10dc126a9d7551cc1ff997ae7ca1
-
SHA1
249aabbef2f568b542a98f9c7b5de36c57706703
-
SHA256
68c1628e5a768fe45bff5e382652dcf1ceb07732df0f86b4de879e667cf4e326
-
SHA512
39dcbde4b805fa3f26bb6b26a6d38a4c31f5cdc3fa3e2103a05d613b71d4448d6aca1b7a8574107d3fe032868e263e3b49f3448bd397f41acb372e0336958652
-
SSDEEP
49152:24htuQXxpCdpFh96yuyveT0Omfxy18dnCEgejQQ35skT1J+j0eSWnE/5QSXXy91W:dtTXuPFh9GtmfxyCxlQQJsWnGSyE/X8o
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 755b10dc126a9d7551cc1ff997ae7ca1
Files
-
755b10dc126a9d7551cc1ff997ae7ca1.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 341KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 30KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 97KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ