Behavioral task
behavioral1
Sample
66d38686a7c46c1261f1aecf49e4220c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
66d38686a7c46c1261f1aecf49e4220c.exe
Resource
win10v2004-20231215-en
General
-
Target
66d38686a7c46c1261f1aecf49e4220c
-
Size
1.3MB
-
MD5
66d38686a7c46c1261f1aecf49e4220c
-
SHA1
25decb288a58efaa371cf1e14508ea2528da6968
-
SHA256
d0002951eaeeca7137e58c296197e361d310cdb712e849970d9121dee9e3c549
-
SHA512
be4878b8c619a919f52193ca03cf1866a65787511658c8711f62f4e4ed32ac9106c526c1d6b3b1bc259f4773c9db7a170dd1359d27987b857fdb6578f3f556f7
-
SSDEEP
24576:2PI5w7uX9gx+jlK6o5mMdqTxV8tZSnaZcRbKTuRDat127G:AI5/fw6o5mkqTxGfZWRWt1EG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66d38686a7c46c1261f1aecf49e4220c
Files
-
66d38686a7c46c1261f1aecf49e4220c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 127KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE