Behavioral task
behavioral1
Sample
3159554629d0a66ecc15f2ec77eab581.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3159554629d0a66ecc15f2ec77eab581.dll
Resource
win10v2004-20231215-en
General
-
Target
3159554629d0a66ecc15f2ec77eab581
-
Size
99KB
-
MD5
3159554629d0a66ecc15f2ec77eab581
-
SHA1
6c412bd54f35be0c36752b785757e73326944ee5
-
SHA256
e81a081d91a66f95708af7880d6b2ef6d276e7a6362a62d2bdf5efbad2711e48
-
SHA512
002a68ffaf434bbd97c18dad15e40d793e469e5bf92a69262cde0e95f25254f138b3d6bdc09380b33cb505c5030eb5499dc955f6065e850a7e77eba7c5ea047e
-
SSDEEP
1536:MIBqSAISOZS9uC9TQsBgeLBepEEyqNNytz/qTTGQqvQC8XlUh7aA5ShHKWo:ywSOMkC9TDBgyfyNyZ/TQqvFzgLhHKWo
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3159554629d0a66ecc15f2ec77eab581
Files
-
3159554629d0a66ecc15f2ec77eab581.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 36KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 656KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE