Behavioral task
behavioral1
Sample
033216abaab7c2c32a0bb3054d0d205e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
033216abaab7c2c32a0bb3054d0d205e.exe
Resource
win10v2004-20231215-en
General
-
Target
033216abaab7c2c32a0bb3054d0d205e
-
Size
3.0MB
-
MD5
033216abaab7c2c32a0bb3054d0d205e
-
SHA1
d32d55189de315ecbea1c684a932c9d4ed4f1df5
-
SHA256
a1fb6ab5281047f94b20a26017702034093fd495cc014269fd1b5b18997aeb48
-
SHA512
a61352328cc2f682e6ce4ef288c81c36fed91b3809270d9730813f67140ccddf63cb5e7f53a050f865a9bdd133b5b9dfe8bce8b326ad91385a96d632a706911c
-
SSDEEP
49152:eoMF+BXCEvcAPcLo2VznoRzsu/8Qy+ycTJGah9nsc7KzCCGu6TZvAqYC2fWuKd0p:e1F6Tvc0go2Vzywcrxh9scemHHjuc0d
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 033216abaab7c2c32a0bb3054d0d205e
Files
-
033216abaab7c2c32a0bb3054d0d205e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 497KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE