Behavioral task
behavioral1
Sample
20f10813f1a3335dd9eec47a9ab56bdc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20f10813f1a3335dd9eec47a9ab56bdc.exe
Resource
win10v2004-20231222-en
General
-
Target
20f10813f1a3335dd9eec47a9ab56bdc
-
Size
803KB
-
MD5
20f10813f1a3335dd9eec47a9ab56bdc
-
SHA1
a2acd8e16322318404d7fca49ee339793b0ddc8d
-
SHA256
70d95c67fc5d07c44432cd6cfff1d05bb735d0221e2b1cc62e055879f7d66f47
-
SHA512
e17ef25dc7c87e9235299c9719fd3c728ad0e2cc7fd33f09bbb0867699376cf0fd24c710e7156c322de504a518a10f16f8613094fb5901b1bd7f7f636f9a3b2e
-
SSDEEP
12288:ykZM+Gii9KwOVOVNp5PNNAmD80539PfglNfu9wTjIm159/BokhOp:5siiY7yPvAmg05hfqiwT71D/BoWE
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20f10813f1a3335dd9eec47a9ab56bdc
Files
-
20f10813f1a3335dd9eec47a9ab56bdc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 779KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE