Behavioral task
behavioral1
Sample
7ba7b42bc343d5407751f32aa9ec7b7d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ba7b42bc343d5407751f32aa9ec7b7d.exe
Resource
win10v2004-20231215-en
General
-
Target
7ba7b42bc343d5407751f32aa9ec7b7d
-
Size
1.2MB
-
MD5
7ba7b42bc343d5407751f32aa9ec7b7d
-
SHA1
6840616cb4cb8be19bd25f8340ef9c78a7a3d61f
-
SHA256
73e40a4a779fb32f27f97e3c1b0106e2c3431c78f3d5a231b8cb269a1dd94ed8
-
SHA512
99aa3e970d2f8f64ff357455b895bb5cde0e44154efcfd812cc2c8a88f569fb8dc6e523a11059979ed866084465f4731e896c63f3f3a3c5f01dde68757a02220
-
SSDEEP
24576:54+PUNqriH7YbgxPedKSIedBoKn+2v3bGtHMdTHWxNPIHM+2Elus8G:5YMoYQ/67RVgdsM+Dluw
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ba7b42bc343d5407751f32aa9ec7b7d
Files
-
7ba7b42bc343d5407751f32aa9ec7b7d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 40KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE