Behavioral task
behavioral1
Sample
1d6367d4a0deb9d410be6b359c7f4dff.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1d6367d4a0deb9d410be6b359c7f4dff.exe
Resource
win10v2004-20231215-en
General
-
Target
1d6367d4a0deb9d410be6b359c7f4dff
-
Size
5.1MB
-
MD5
1d6367d4a0deb9d410be6b359c7f4dff
-
SHA1
a7d2e29de93120a8876760e16fcfa4894c04eb0a
-
SHA256
745b0553570d3f9038fad36ab9ccfd0c8431d7780fcba34996fc6972955f1d16
-
SHA512
fe9961f802f47017fe2170cadcd5e25b3ce54e7a688b2036f417d8f80a7ae5e6619038dc4df46cd0601f09488cb8cef087a07064d8c02414e9eaf33727891e2e
-
SSDEEP
98304:KdfZ9V8z3IavkoIaT14ZdhECN/VYrnIL7eyKYG4SC1Zto:KD96z4acoIaTGZdK+tPveyKs1Zt
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d6367d4a0deb9d410be6b359c7f4dff
Files
-
1d6367d4a0deb9d410be6b359c7f4dff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 433KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE