Behavioral task
behavioral1
Sample
0ed9942bf8ec5b5097e4ffeecb200d58.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ed9942bf8ec5b5097e4ffeecb200d58.exe
Resource
win10v2004-20231215-en
General
-
Target
0ed9942bf8ec5b5097e4ffeecb200d58
-
Size
402KB
-
MD5
0ed9942bf8ec5b5097e4ffeecb200d58
-
SHA1
9dca0c7d6a54d6fdf474611c52d6b28cde95ffc5
-
SHA256
f28778ff5cb8bede2fd8c026148b892dea46807e54ac4b60c17ad407920fb0e2
-
SHA512
94983988ff5c3415a437af313811c450bee5b3b355a24c11d8fe0d9e5519a090f4e7da7b7bdee0c820031bbe5eb16582c8a69c010cd0e5286ea6c68621e1310c
-
SSDEEP
12288:yjl2nNe1pKpy3vB5hGlOd+Uct5oE6CBDaLe3N:y5ee1pQy3Z5Ela++Lq3
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed9942bf8ec5b5097e4ffeecb200d58
Files
-
0ed9942bf8ec5b5097e4ffeecb200d58.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 17KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 378KB - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE