Behavioral task
behavioral1
Sample
1fedb91f4d413d32804f87451c84a0ae.exe
Resource
win7-20231215-en
General
-
Target
1fedb91f4d413d32804f87451c84a0ae
-
Size
544KB
-
MD5
1fedb91f4d413d32804f87451c84a0ae
-
SHA1
0f34e0052dd98f4377426a5b4bac8d319bd620ae
-
SHA256
ba0bbe9290a41aceaa88bcbbdcf2f6a1597943d9b3501806088239c97e384e2d
-
SHA512
da595fbfd4dd1f9383a6230315dc3a9b7245ab53c53f0722045e490850d764dba858bde3b5f4152019d9fa10424999e2361740a7943f2fe1465c1bfe709d604b
-
SSDEEP
12288:uqgXc6HfBzXt1C3fgEziRrmNwA7ceOzP4qMpEkok3eSzBdP6cRWEJb:a/Zd1C3pz6VAb1q5rqBscsEJb
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fedb91f4d413d32804f87451c84a0ae
Files
-
1fedb91f4d413d32804f87451c84a0ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 112KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 425KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xur Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE