Behavioral task
behavioral1
Sample
3983b59b55fc34b93f7b9eb09e828f07.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3983b59b55fc34b93f7b9eb09e828f07.exe
Resource
win10v2004-20231222-en
General
-
Target
3983b59b55fc34b93f7b9eb09e828f07
-
Size
5.2MB
-
MD5
3983b59b55fc34b93f7b9eb09e828f07
-
SHA1
e0a580e4e1841765f0c2f2f5ed7d635550677cf5
-
SHA256
6582b4499e74c98f85701802317ed92aa1bc11b4822d3d1d0c248eb136a2a0ca
-
SHA512
950ee93c6f2a3858cd4a8d7647c8bc0c768dbc35800bc095f660627eaeb21fb105ffb58834055e0a718329893e58cfeb2603744e3cc507553438cfae2b82229f
-
SSDEEP
98304:JcNj0v7RHsu/K8OqWNue1qFJ/mwi04e+L7eyKXGnJ34+XIdE:EgvlsElqqD/mwi04BveyKmJ34aI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3983b59b55fc34b93f7b9eb09e828f07
Files
-
3983b59b55fc34b93f7b9eb09e828f07.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 429KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.7MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE