Behavioral task
behavioral1
Sample
26bdfa289d5719c968b38a30db2e59a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26bdfa289d5719c968b38a30db2e59a4.exe
Resource
win10v2004-20231215-en
General
-
Target
26bdfa289d5719c968b38a30db2e59a4
-
Size
1.2MB
-
MD5
26bdfa289d5719c968b38a30db2e59a4
-
SHA1
3d5aca3562a4e1aea99786c5cd4605cd6a2a5eea
-
SHA256
98cdac71420ad9ad5c6b91156b306f4aaaccb004c922707c5f9d2e4439c07c3e
-
SHA512
da19152bed2cd27ffd5efa062299632a56fa229b1f60c461a8eb07f25bc1e8d2af2f032da7aa8f53c71f826deafb8d4df232ef2cb7bc78fa83fb699b4fe49306
-
SSDEEP
24576:PDWPui7+ob90N0CAlSBsWWAem6f7bVOYD1j2cYa:SPuq+EGCCAlisPEYD1Sc7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26bdfa289d5719c968b38a30db2e59a4
Files
-
26bdfa289d5719c968b38a30db2e59a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 45KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE