Behavioral task
behavioral1
Sample
0311be39deb76ab469badaed5777f175.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0311be39deb76ab469badaed5777f175.exe
Resource
win10v2004-20231215-en
General
-
Target
0311be39deb76ab469badaed5777f175
-
Size
1.5MB
-
MD5
0311be39deb76ab469badaed5777f175
-
SHA1
49d0af51e55c4215ec85d9e5130b9f2b216ac467
-
SHA256
7207932436b63039c38f55b69352fd91bb75883b6d2f80b5a845fa75fe36bdb7
-
SHA512
8ea9a825843e42ab418ad13596a239f0ee0c2cbbe206e1d3c5b16bc6e0b07fd399b48473ac920dd3c4519c77661aa138cf217e1d46cd5f020e9867b726ca2944
-
SSDEEP
24576:fI3oofGPbtJsXr+N4ihxHA7F7UBj65ebzMXSYRQFKjk/t5qYNkB4vD1bi9m:f09GDzdN4oA7FYzbzMiYRK/t5sqvJb
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0311be39deb76ab469badaed5777f175
Files
-
0311be39deb76ab469badaed5777f175.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 313KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE