Hooks
Behavioral task
behavioral1
Sample
25e26f5f9d1b172a752d708af77af231.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25e26f5f9d1b172a752d708af77af231.dll
Resource
win10v2004-20231215-en
General
-
Target
25e26f5f9d1b172a752d708af77af231
-
Size
1.1MB
-
MD5
25e26f5f9d1b172a752d708af77af231
-
SHA1
8ef3571edb5ee622bcf0df1a678c87b557ca6506
-
SHA256
e54259a8600b12521191395259da2545451751b2625560d49c02758a014313ca
-
SHA512
3d364d0b435802345a97aaa7df2895eac93d8837a4a494868a352342b2cff37e3000be00bf14e51c081fdab0a54f90670278b08f5b1d86feba6083ec435b9a8f
-
SSDEEP
24576:F9vBeM9AtKG0IQSIQYhy4e3CzRS1oP7CuwWd2efBaPosLVpt:F95tSDYhyPy6oP7CuwvefB6L
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e26f5f9d1b172a752d708af77af231
Files
-
25e26f5f9d1b172a752d708af77af231.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE