Behavioral task
behavioral1
Sample
140df74d0617c6f6a449939c6aff3b5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
140df74d0617c6f6a449939c6aff3b5d.exe
Resource
win10v2004-20231215-en
General
-
Target
140df74d0617c6f6a449939c6aff3b5d
-
Size
1.2MB
-
MD5
140df74d0617c6f6a449939c6aff3b5d
-
SHA1
88f9e4dd1d411d1692ffdd4f36da742084e60f65
-
SHA256
7f9ce9fb7cdaf44f06a7e81530f1727d6a14f975818ce95196f65ae98e83aa71
-
SHA512
91389d8a9259a35e3faef0cc54c85e7c9055a665f01bc72985211a080121d3a545b1a144f47655780c622d441bfe6c1ca642a953ed84bbe5ae4e79534d78e3c7
-
SSDEEP
24576:sLF6pnn63cOHlwVuvr42trV/KCOwm0tOF8BT4pM3J336teFlmr9X4IkVkfo:sL1cOHOgvr42tsCOwA8BrJ3oemB4Ijo
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 140df74d0617c6f6a449939c6aff3b5d
Files
-
140df74d0617c6f6a449939c6aff3b5d.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE