Behavioral task
behavioral1
Sample
1e59be71e2c3520ac6628b000790012b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e59be71e2c3520ac6628b000790012b.exe
Resource
win10v2004-20231222-en
General
-
Target
1e59be71e2c3520ac6628b000790012b
-
Size
2.5MB
-
MD5
1e59be71e2c3520ac6628b000790012b
-
SHA1
008daf59abe9b8d0c40e425068efcf6fded3a4e7
-
SHA256
04eb2a63fcddf5a90115b739428bb19ac81ec47d7c2f1f6474db608c05355de1
-
SHA512
6001a15a703c2b2798d89c8403ace7f9a45ba9316ba6650fe010e6b8ced635dc2b7ec03b12d7c5df0162d4d91fc7611aec47f10f74b0de2350d574e7e0484bd4
-
SSDEEP
49152:BplxuB4Z4JFvEyG/R5ApAWLCn8pZCFPJPJ9gmhZRtxC2:BplxUbv2/0Xm8wPZJPhZjxC2
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e59be71e2c3520ac6628b000790012b
Files
-
1e59be71e2c3520ac6628b000790012b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 243KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE