Behavioral task
behavioral1
Sample
272b706925733fc429dafefabbde24a1.exe
Resource
win7-20231129-en
General
-
Target
272b706925733fc429dafefabbde24a1
-
Size
6.3MB
-
MD5
272b706925733fc429dafefabbde24a1
-
SHA1
c6dc4ed69a7ea66c0b5c4b620f8f49e8d0ab277f
-
SHA256
44d54e64683ebb67eaea413e15112b44c884e940fd74428c04288f2fd9a34980
-
SHA512
5ddb8f1ef55c172d3ce46cb321bed3dc7aafa94e0a7b588cd956c93218c5adcde05171026686f635233f746953cdbea0d258f9d53c3a406f27e569045a2d42d2
-
SSDEEP
98304:bF5An3/7s3wTmef6S7Q6oUQfO+JVaYltSEg96QxTxqVIvrjM:bFE3/wgTVB7QjUQfb/bg96QxlaIvrY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 272b706925733fc429dafefabbde24a1
Files
-
272b706925733fc429dafefabbde24a1.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 16B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 10.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ