Behavioral task
behavioral1
Sample
9e31f44c46116cd9b86fde8cf94539869dc19d05c4718f1566d90d761ef0f946.exe
Resource
win7-20231215-en
General
-
Target
9e31f44c46116cd9b86fde8cf94539869dc19d05c4718f1566d90d761ef0f946
-
Size
1013KB
-
MD5
b60f54b10553b5f21780665d4bedc0d9
-
SHA1
8181a367e2e9f3c480c261b7e0f363a98c73dff5
-
SHA256
9e31f44c46116cd9b86fde8cf94539869dc19d05c4718f1566d90d761ef0f946
-
SHA512
ac57af663b2fc222c35f9ab37965faccc4c659ce46bcda7fa05602405ccae0bf81d2ac33189f2ae3f5b850002eca2bef75b84e9d8913d55a4c9e812811877eb8
-
SSDEEP
24576:7hIjd7wrbD3KTOr+QqpJdmy7pWQYAvGDKxdbIPiSd/i15BpNbxdnRAYNgjM:7hIjWfDnr+rSfQYJDKxdbIPxiRpZvgY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e31f44c46116cd9b86fde8cf94539869dc19d05c4718f1566d90d761ef0f946
Files
-
9e31f44c46116cd9b86fde8cf94539869dc19d05c4718f1566d90d761ef0f946.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Themida Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Themida Size: 1012KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE