Behavioral task
behavioral1
Sample
3c0dcc5868322dac0ca1aa61dca6237a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c0dcc5868322dac0ca1aa61dca6237a.exe
Resource
win10v2004-20231215-en
General
-
Target
3c0dcc5868322dac0ca1aa61dca6237a
-
Size
1.2MB
-
MD5
3c0dcc5868322dac0ca1aa61dca6237a
-
SHA1
b016fdbb63d5463886ebc2532e409bf69268f4a9
-
SHA256
878c255ce0bcd1305b78609dc17066518fc91063d8d49a7eede8dbda0faff64d
-
SHA512
23bd3215e6a691bb086fdb0da6ddae7e2d43c167b8cdd04a9789355d12f2da0ed5e9d2810855df919564686a849db395844d88fb0d270c846ad4bbbb81411d99
-
SSDEEP
24576:lrpE4O2kS7pBNGe5nuYYWE7x6XSK2noUH2eINpmKdDHUyYDv:lwrSjRJ1E7x6CHoUHNIBDHvYr
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c0dcc5868322dac0ca1aa61dca6237a
Files
-
3c0dcc5868322dac0ca1aa61dca6237a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 64KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE