Behavioral task
behavioral1
Sample
13f2ab726a51606e1c1a8d0e52ce077e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13f2ab726a51606e1c1a8d0e52ce077e.exe
Resource
win10v2004-20231215-en
General
-
Target
13f2ab726a51606e1c1a8d0e52ce077e
-
Size
5.0MB
-
MD5
13f2ab726a51606e1c1a8d0e52ce077e
-
SHA1
b98692da8b084bc18002766cdca29b4126a2b732
-
SHA256
3baccf30e885f300ab5dd927fff4fc68076810f18b1241dd3399deace01cb7ca
-
SHA512
723eb68e19aecb5b0111486d11428eecaa44c77ff78c206566819a4fd2410fb69dd38fe8f044a11742d2a2aec1b5cc27b5ace10cf6fb265e739bca51f7f9946e
-
SSDEEP
98304:FmiGYXeYMJTfxuO6onW2V3lOXD1qmWrviTNrLCpEDykWXgoh6chjKSLSrZaSZa+U:9GYXeY2crafe1qmlkpIRWXgohLhGS2RC
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13f2ab726a51606e1c1a8d0e52ce077e
Files
-
13f2ab726a51606e1c1a8d0e52ce077e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 432KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE