Behavioral task
behavioral1
Sample
152a2257d185272b66804459ca9374f6.exe
Resource
win7-20231215-en
General
-
Target
152a2257d185272b66804459ca9374f6
-
Size
599KB
-
MD5
152a2257d185272b66804459ca9374f6
-
SHA1
502ca4996a8f4c6291a6409857cc83dbb101218f
-
SHA256
bf9b7644253fdcc4d625c6bcb43da5c4931d0919f208573c186e064ff35ea443
-
SHA512
30b3abe87d9e64821548f643d6a474a21d3169dba263b074b9d1dcb023b5428298ac66f67262ea143055b9e0790a17640820b0f48dabd26bdf44a7fc78a31307
-
SSDEEP
12288:/qnnnnnnnnnnnnnmiFTPzohNNc4epeRjdlPyupiCsCSre0QxAH8NA4Kea:ZiFQhNNDecddl6upqrfH8NAPn
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 152a2257d185272b66804459ca9374f6
Files
-
152a2257d185272b66804459ca9374f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 574KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE