Behavioral task
behavioral1
Sample
1bc16787202dafd1ea2fd7e049028c66.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1bc16787202dafd1ea2fd7e049028c66.exe
Resource
win10v2004-20231215-en
General
-
Target
1bc16787202dafd1ea2fd7e049028c66
-
Size
1.8MB
-
MD5
1bc16787202dafd1ea2fd7e049028c66
-
SHA1
c640cf209809a852427d00760ade7fdb3c60a5b9
-
SHA256
21e357851ed1b5e19153d9c8125da94f6bf0277340d8673b942d18817eeaa60d
-
SHA512
a68f645e56b29ee834be107509f500b16ae4da56d44ed4133f739aea7219467185b9955a69d56953b32a713ed54aff24ba34a0a76fc399064dc7a3b15132ea6d
-
SSDEEP
49152:bWjlK7yaLZUgo25zjKaUCFY6ffngZB3tfJXN+KGzy:t7y2CCK5CdfnS3tfQy
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bc16787202dafd1ea2fd7e049028c66
Files
-
1bc16787202dafd1ea2fd7e049028c66.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE