Behavioral task
behavioral1
Sample
1e7145eda3185d2e708c9bd0bb894598.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e7145eda3185d2e708c9bd0bb894598.exe
Resource
win10v2004-20231215-en
General
-
Target
1e7145eda3185d2e708c9bd0bb894598
-
Size
529KB
-
MD5
1e7145eda3185d2e708c9bd0bb894598
-
SHA1
1658aec1bb94ed46e49bc6ca5c7c9c1373800868
-
SHA256
dbf6f8e8f66d5d7dfb0d69343aa7b32de29e18cd5373f59a927ba0c93c066819
-
SHA512
483f83d368dfa370867b06b2bac03b2e6176e8a1cc119e38afbccbadc9696e11353de841ee66f4b11f914ad94e066abe5e05ae5db3b41ddbb655a40bb83ba276
-
SSDEEP
12288:8zNsLmuPRh0W5ZCQY7j9z/ztS5ZYt55cMYvFOhiRKFrp3PC52p:8+NPrx5ZCQY9z/xS5ZYt7cMYvFOhiRWY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e7145eda3185d2e708c9bd0bb894598
Files
-
1e7145eda3185d2e708c9bd0bb894598.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 452KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE