Behavioral task
behavioral1
Sample
142757e6d664bea134e4ae9f50641da7.exe
Resource
win7-20231215-en
General
-
Target
142757e6d664bea134e4ae9f50641da7
-
Size
559KB
-
MD5
142757e6d664bea134e4ae9f50641da7
-
SHA1
90aee38715443645962ce67c864d492ed98c7bca
-
SHA256
c7dd6bd7d73476214ccafc0dac1d8a4be5e00e88e34c46c639a3c8c47dfe86fd
-
SHA512
25d4d24f1dbc68e109a1c18ee57085d6379cbb9bfe8af8b505fb8686abc236db7e263936aff1c8de561b07a188f009f821dc33dbabf0f61c67e62f43a8a32367
-
SSDEEP
12288:K5oBMyWZjHqP0x++GuJd88umPtXvMJ1GeajsYUS5X:KWBMNjHqPyRfd88p1/mYeaj7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 142757e6d664bea134e4ae9f50641da7
Files
-
142757e6d664bea134e4ae9f50641da7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 62KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 492KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE