Behavioral task
behavioral1
Sample
059dd2c292172e8296dd8d1b09a1a496.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
059dd2c292172e8296dd8d1b09a1a496.exe
Resource
win10v2004-20231215-en
General
-
Target
059dd2c292172e8296dd8d1b09a1a496
-
Size
1.3MB
-
MD5
059dd2c292172e8296dd8d1b09a1a496
-
SHA1
dd3ce2304c51efbde2a65f8bb33e365780459476
-
SHA256
65f2a0650bda4d51f159107ef05754ce6c2b626c28a9457484f8b5a8adf339aa
-
SHA512
dd8c5ab4470328e7ee37a38be6bfedd5b461dc115e34b9e64a46758f3ced310cff967c773ce3347b765a1dcb2207517075445af8070041410b3cdd6af28c1241
-
SSDEEP
24576:lYFj6xcDm02mlyldQ1V7C0K3lSZuI903kyelQbJyHoxCiwn1uHGPPCteP:GFj6x3mgdQ1V7kDX+Ow1BXgK
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 059dd2c292172e8296dd8d1b09a1a496
Files
-
059dd2c292172e8296dd8d1b09a1a496.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 149KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE