Behavioral task
behavioral1
Sample
242574c1bc92d42b31375ea2f50544cd.exe
Resource
win7-20231215-en
General
-
Target
242574c1bc92d42b31375ea2f50544cd
-
Size
692KB
-
MD5
242574c1bc92d42b31375ea2f50544cd
-
SHA1
471fa502e40842dd98d61bc298eddd0a9dfc60b9
-
SHA256
17e20be88e7ee469ee5956b83451c04ef849ad0feb4280753d713612fe208e1d
-
SHA512
9ec6b4f96ecd452ac24ab576329f609d354b54c576cff1acaf84cd1ab598385ceb4503d93a3efef01dda53b3725caf835e8c6e7bc2a62c48eb16633ed41d8c5d
-
SSDEEP
12288:F3c5fdGhdpkdA4zO3LgbE+SOsPiIzoFnCdljuMnAuiL+Qzg7vFaUZTa:F0dGhdmnzgLgbHXiimopCnufVXmbZm
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 242574c1bc92d42b31375ea2f50544cd
Files
-
242574c1bc92d42b31375ea2f50544cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 117KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 570KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE