Behavioral task
behavioral1
Sample
26865db1963430cddb7d96a81e3b2d03.exe
Resource
win7-20231215-en
General
-
Target
26865db1963430cddb7d96a81e3b2d03
-
Size
1.4MB
-
MD5
26865db1963430cddb7d96a81e3b2d03
-
SHA1
671d1dae7ef48c9b6567b0b504746b50621bbffb
-
SHA256
55ba754af80c8e32b31ae4a5582b64f5b8cedc0c7d3eedec85b000732cd23b7b
-
SHA512
f4118de9ca62b68daf9476b4b3919c66356074610ffc3c72451d3fe4fe23b3a49c81e91f96422dc30aef3c5466cf4d45e058e2ed3360d1e1e45bba8325311cb3
-
SSDEEP
24576:RxLmSeBx8DqV+3ail52gZob4lOVNzt4kI5GwX2HHOKSqH9s9kN+oU8Z0yTWlazb:Ra8qVFgZUVNWl5GwX0uKS0kkNO8ZNl/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26865db1963430cddb7d96a81e3b2d03
Files
-
26865db1963430cddb7d96a81e3b2d03.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE