Behavioral task
behavioral1
Sample
0e055b11e4e0fbc5d4034906106eb22f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e055b11e4e0fbc5d4034906106eb22f.exe
Resource
win10v2004-20231215-en
General
-
Target
0e055b11e4e0fbc5d4034906106eb22f
-
Size
522KB
-
MD5
0e055b11e4e0fbc5d4034906106eb22f
-
SHA1
049e953363b5ac62d487415b7a9efdc2c1a0bf2a
-
SHA256
8ccab9778d92ae0e432818ab3409555aa24b38cc47dbfe13111ddd3fac90fc80
-
SHA512
7b0fa2cc3786f2c763bcc06923e11980d4a950525efca21b199696fc9137e93f5405daa2bdd9691fff56844be3fee4485e1a04cf32b1a865cfe533009d3690bc
-
SSDEEP
12288:mknjpkNKGFJd4d1deKNbegOZdjKmcbbBEXnM/B5WaifA:myCFJdYoKVOZdOx5sMZ5WzI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e055b11e4e0fbc5d4034906106eb22f
Files
-
0e055b11e4e0fbc5d4034906106eb22f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 17KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 487KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE