Behavioral task
behavioral1
Sample
15c0349b850fa47e5f7d939e0ea1a427.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15c0349b850fa47e5f7d939e0ea1a427.exe
Resource
win10v2004-20231215-en
General
-
Target
15c0349b850fa47e5f7d939e0ea1a427
-
Size
1.5MB
-
MD5
15c0349b850fa47e5f7d939e0ea1a427
-
SHA1
58faab3e6927f8cd72193ee38dea6ea4e99ba70e
-
SHA256
310c2777c9e63289d8bffe9972673fbcccf23c89648281e23167c6f8fa30a7ad
-
SHA512
c62d3e2078bc3484dc3395402c95b4cbcfb51bdb9d8ecb0f8349ad71059c7fd7a027cad8ab8afd758ba63dfe73f255843ead6cab7e6ea22273ed4613c1c978c0
-
SSDEEP
49152:55IQYvKcxiKx3rP0a5DiwrtpPCKQt30VkV:55PYycxiKF0aR3rPc+y
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c0349b850fa47e5f7d939e0ea1a427
Files
-
15c0349b850fa47e5f7d939e0ea1a427.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE