Behavioral task
behavioral1
Sample
05a893d15397264b47175391a9982c89.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05a893d15397264b47175391a9982c89.exe
Resource
win10v2004-20231222-en
General
-
Target
05a893d15397264b47175391a9982c89
-
Size
376KB
-
MD5
05a893d15397264b47175391a9982c89
-
SHA1
b63c2cba91de8081678b908df1bbfb000e0c1785
-
SHA256
127b7beb3803f3054769d3c66496ace0e6cefba90110c42a2cc3c3b5d03d527d
-
SHA512
ed58eaae056711f8818b65ea564900a848478975f03384fed009d640f6165e80a08672b1f2a7d911eb3ccf3f4033943cb39be2ee1f42e3902ad8671a4d7cc8bf
-
SSDEEP
6144:1/2yrCE68pWBpiN6sbceHTZHqUZ+f9IT9UOSNeN2XP4mybp1ZxGBmhBB+lweSf3Q:9hr45oN6sbcA5+qTaDkNJmybpxWCzOEY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05a893d15397264b47175391a9982c89
Files
-
05a893d15397264b47175391a9982c89.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 35KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 343KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE