Behavioral task
behavioral1
Sample
1fe19cebdae0a41193960951ded5aa9b.exe
Resource
win7-20231215-en
General
-
Target
1fe19cebdae0a41193960951ded5aa9b
-
Size
750KB
-
MD5
1fe19cebdae0a41193960951ded5aa9b
-
SHA1
bbb0847cdb77ccdd956818c02ee8a36368ef27aa
-
SHA256
31ccaa6eaaf48662b1a05477460ca13862e5bc32872cfc08e05d03ffe3dee1d7
-
SHA512
05112b3b839eec7ef70412d1e04ee0422efeffeb504ab4f5a97016849c0d01ae2fa0ca19e43bd2faf190ec53dfc6e40faf6bc89329546c3028ba9034d5eae845
-
SSDEEP
12288:Pxi0TFbZWbBOVGWRYqyeIMSrXR/5lX4JEJbY2wZhxaDtaZHtrt9SFNpm8+n41dsc:P0mFbAbBOVGoYqyPMSLjqaJb1wZhwDtI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fe19cebdae0a41193960951ded5aa9b
Files
-
1fe19cebdae0a41193960951ded5aa9b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 733KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE