Behavioral task
behavioral1
Sample
192638bc36171cc16f8275ef077213bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
192638bc36171cc16f8275ef077213bd.exe
Resource
win10v2004-20231215-en
General
-
Target
192638bc36171cc16f8275ef077213bd
-
Size
572KB
-
MD5
192638bc36171cc16f8275ef077213bd
-
SHA1
6b858d3c0f8f7d7830878ef5b477defbca57069f
-
SHA256
383245d4f8535fbe4cc24ec1aba50e0953066fbfed3b189b1bbe1b20e4aa307f
-
SHA512
b3097c6db18933e5f8f4ed2a7f168f51ec7ff80e900b8a9445afd88769dc1db1fdc849d20a18d5974568290bbae1d5df353ff3fe08b71ad6a809825b814905fe
-
SSDEEP
12288:wN78Fchr9kTUPrRGOOWmT/HlSNo4QKlwJ9PoLU:wN4y5kTUzRGOOWmjHlSo4RlmtKU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 192638bc36171cc16f8275ef077213bd
Files
-
192638bc36171cc16f8275ef077213bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 420KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE