Behavioral task
behavioral1
Sample
21b48351968b6204ff23156e75a750f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21b48351968b6204ff23156e75a750f4.exe
Resource
win10v2004-20231215-en
General
-
Target
21b48351968b6204ff23156e75a750f4
-
Size
5.0MB
-
MD5
21b48351968b6204ff23156e75a750f4
-
SHA1
06dc472c06719b8c594d88e29032b702375e5a36
-
SHA256
ba26e3ef16727597c94dbd44a7e8c9bf20235fb89dc3ff7b903ede549b1344bb
-
SHA512
2e32875203010fb149eb4baa96dce90c2c47929fd8d71b73fccaeec8b25eb9708d4bdeedb709120fb21a1f77da41bb622586e7be16e3096eaa1cd957d8888c44
-
SSDEEP
98304:A+0Vk2PM/S0VNkd0WRJ4PZ13hvt+cCrLC7HWl4On9nMDdiOZdqyBPSz6GGHrMUoo:A+0GSMkd0Dhvt+gZmlb8dmO9v
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21b48351968b6204ff23156e75a750f4
Files
-
21b48351968b6204ff23156e75a750f4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 422KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 11.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE