Behavioral task
behavioral1
Sample
0b5b35066e2b1f80ca1412ba3abf5483.exe
Resource
win7-20231215-en
General
-
Target
0b5b35066e2b1f80ca1412ba3abf5483
-
Size
1.6MB
-
MD5
0b5b35066e2b1f80ca1412ba3abf5483
-
SHA1
87a7e7ad34f0016309104acf52a49db886787100
-
SHA256
9d258320898e54d8202e180162d1a36ad330b4722fc489e00f425294251ef1b9
-
SHA512
69a01f1e63139e1a42c26e9e12ee408689ee493951cac78a964d33318c0a88a3c4648af1cd2789f5fa21876814c2e856f5501bfa0e4d23b29ccd0f48e92818b2
-
SSDEEP
24576:e6QXJuCXyPKKxBgXHnLaLSZXRBU4jwrDhI59+7mgKt3FjRpwo206IK5L8eRlikR:MXJMK4gXnLaGUrrtkgKdpwOoIMikR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b5b35066e2b1f80ca1412ba3abf5483
Files
-
0b5b35066e2b1f80ca1412ba3abf5483.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 319KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE