Behavioral task
behavioral1
Sample
2673d981ccaa7cd8bcbbda39631765d1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2673d981ccaa7cd8bcbbda39631765d1.exe
Resource
win10v2004-20231215-en
General
-
Target
2673d981ccaa7cd8bcbbda39631765d1
-
Size
156KB
-
MD5
2673d981ccaa7cd8bcbbda39631765d1
-
SHA1
f9821209e3d952c9076e73c9eae47e3ef5265bf2
-
SHA256
27cd78c4eee1479908b494382a14729f62b62b6299ab90fb39432be9fa091576
-
SHA512
81d91cbc61cf0a90ae9db46f987235cca7d139c5f2848f51f4783bba48baac9b29f4d8ae538a0bf15b5fc484050de3c3e75b433d7e8b7bdb58ff9d5b4b0dd985
-
SSDEEP
3072:s+wkRucF6KJT8L2RFFgRMxrIbRIq3eB7O8DJCJ84oNTy/:JTt6KB8L2fORYIaqoDkJ8pNU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2673d981ccaa7cd8bcbbda39631765d1
Files
-
2673d981ccaa7cd8bcbbda39631765d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 92KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 392KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE