Behavioral task
behavioral1
Sample
fbc9c57dd1095c4be7f1eb4d6f66aded.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fbc9c57dd1095c4be7f1eb4d6f66aded.exe
Resource
win10v2004-20231215-en
General
-
Target
fbc9c57dd1095c4be7f1eb4d6f66aded
-
Size
2.2MB
-
MD5
fbc9c57dd1095c4be7f1eb4d6f66aded
-
SHA1
cc26ec30e603c925d157f266c2c0c190d3e9b5b7
-
SHA256
f00f2eac0248384c46e9d24d07257347b40e36ff5997c39db4666e44080da821
-
SHA512
56f73bc3db051e9d8fdd571ca897cd42ee280151f8831cbff8e3d3464c6267b8ec27e07745cae61c20d263e662856bcbec2372543c663882e852d8a9accb7651
-
SSDEEP
49152:5hBC67IqFSFFFAfFG0oDrYQHBDPRnbaSUnRDc3tRaJCi:5h3qGttoD/D5ba1RDc3tRaN
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc9c57dd1095c4be7f1eb4d6f66aded
Files
-
fbc9c57dd1095c4be7f1eb4d6f66aded.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE