Behavioral task
behavioral1
Sample
0dbf255b20d116b657d628402c3d6a74.exe
Resource
win7-20231215-en
General
-
Target
0dbf255b20d116b657d628402c3d6a74
-
Size
666KB
-
MD5
0dbf255b20d116b657d628402c3d6a74
-
SHA1
9bd9ab62a436f7ab277a2437752cf2f46484dbd9
-
SHA256
e607740aa4c47084370316eb0da3cc2098f6738f0b9a067dd1f76ec7b55cd8a4
-
SHA512
307ae015b80a06c71f6d017c10c1daf6c824b8146668e887ade0b57df69298f1c912e52cd47efbbc7db60a7215d0aa2e5c3b9ee550cc508e83278bf3188d7f95
-
SSDEEP
12288:C0bEajxPCHg6zCBm4KrO7AAJByXY/L/AudtN2p6l/IaQBvyMGEH2E:71EkGOkA6XY7Au7Nkg/fQBvvGE5
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dbf255b20d116b657d628402c3d6a74
Files
-
0dbf255b20d116b657d628402c3d6a74.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 640KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE