Behavioral task
behavioral1
Sample
2294e937aabb8e28e6ec27e368cd9c62.exe
Resource
win7-20231129-en
General
-
Target
2294e937aabb8e28e6ec27e368cd9c62
-
Size
4.3MB
-
MD5
2294e937aabb8e28e6ec27e368cd9c62
-
SHA1
3c78a3261f05f36febd420ba739d8afa2ac5b2a1
-
SHA256
922462a16464c149f9ca003d8465a024e92e4c1ae1fb351082953f0596e54585
-
SHA512
9d16db6e3f9b74d2d6a9033013a65d915d6bfade0a886563e1b1232118e017b4834035ca4821e31b3a5e417fdb0b036096542b0a0156b6a5ed948063196491db
-
SSDEEP
98304:1Vp1H0+fvMMDOrT/69QAX/Vm+n4H7GHzefvAVUq8v77wi:bp1H08v1DO3y9QA9Ln4bGH2YUqI75
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2294e937aabb8e28e6ec27e368cd9c62
Files
-
2294e937aabb8e28e6ec27e368cd9c62.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 41KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 579B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ