Behavioral task
behavioral1
Sample
078d06d290bee864cb1ab2d26eea2e3a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
078d06d290bee864cb1ab2d26eea2e3a.exe
Resource
win10v2004-20231215-en
General
-
Target
078d06d290bee864cb1ab2d26eea2e3a
-
Size
1.6MB
-
MD5
078d06d290bee864cb1ab2d26eea2e3a
-
SHA1
0ee7f418d13c2f7bf1ed6a472d03d9ce5f73d9ae
-
SHA256
56c8ab6b10e4342631fed5e64b6e33c715af6b38216f33f1a09a9907d9f1c14f
-
SHA512
1c8be7d5e5302bd72a08aef4cc44b3a8805a1bfc039552f76e74efaabcb8246471eac2dbdb62bbeee5438280a51de32c4023a0fee8b2ed945b21a4985d77efb5
-
SSDEEP
49152:LulMgcF/8Jvm2GHwMv6F5hQCxQED1UZp8lBUVJ8:6lMF+nmwQ6FjQCxQeUX8oH8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 078d06d290bee864cb1ab2d26eea2e3a
Files
-
078d06d290bee864cb1ab2d26eea2e3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE