Behavioral task
behavioral1
Sample
2d3c481966432aa9e11f72f5f33616ba.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2d3c481966432aa9e11f72f5f33616ba.exe
Resource
win10v2004-20231215-en
General
-
Target
2d3c481966432aa9e11f72f5f33616ba
-
Size
3.7MB
-
MD5
2d3c481966432aa9e11f72f5f33616ba
-
SHA1
f42f22c24d5742ddee0dbb0511be314d245607c0
-
SHA256
9c85cd880551e702138872ff055316901f44dd91e8fd29d35d5e3633616c937f
-
SHA512
7ab60f04b2f5bfe7ce94f2068f9bb097ad68f20bdee8a44c170010f88afaf29f113af314d246c3d3028945d04b8beea7d4dd262ca5e75617c8c0b2f0ff08def4
-
SSDEEP
49152:KUvUPbdSM5lkxpg8QiR9mqQ6lGhYP+AV4NEFenNyE+hgH7ou5TXLTf0blf1gyZu0:KUvUPRnnkfvLlGSV42HelFn0M
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d3c481966432aa9e11f72f5f33616ba
Files
-
2d3c481966432aa9e11f72f5f33616ba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 371KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE