Behavioral task
behavioral1
Sample
10a430c3344a1b1bf919c2377df5d59c.exe
Resource
win7-20231215-en
General
-
Target
10a430c3344a1b1bf919c2377df5d59c
-
Size
1.4MB
-
MD5
10a430c3344a1b1bf919c2377df5d59c
-
SHA1
ece4ffc7c66bd73610359a77c9cb5b615f0bab35
-
SHA256
d09a0d79f14322a1bee841dd8f24e4c3fb1b9998eb44142916603317224ba1c5
-
SHA512
134855c4cced1ca90738e5d4f9a545534153c5053e7086d4533d874eeb4942763fe64cbc4ef476bb8e7d33352f09eb7d37ac09d037172ccb8c9a916daa5bb0d8
-
SSDEEP
24576:QEebGxxme/QhIw43Zwm4JOtLaYpWxHELYKz/+HVoHZcYOvuRggBuQQll:QTmxme/QhIwataYpWcm15vIXBuQsl
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10a430c3344a1b1bf919c2377df5d59c
Files
-
10a430c3344a1b1bf919c2377df5d59c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE