Behavioral task
behavioral1
Sample
3d305da300c36afee698b745c9d03bf5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3d305da300c36afee698b745c9d03bf5.exe
Resource
win10v2004-20231215-en
General
-
Target
3d305da300c36afee698b745c9d03bf5
-
Size
5.8MB
-
MD5
3d305da300c36afee698b745c9d03bf5
-
SHA1
458a6eacedf81858d68c49d1f64a4ed2f25fa86f
-
SHA256
8aeaa0561c70662c1ff2c9f301fd2645e8d61930d3e9fc83e0ef67ed2a6d0d23
-
SHA512
ecce057c9820813fb602d1e4fe5f7117e0fcdae947130dc4e16b74b25aded622071c7bb3d35b90a70e60fc0dc51b3c9c928ab321a87b78854320381eb11389e5
-
SSDEEP
98304:4NbdnF4lb0FTvKqVVCjH88kO+nAEkMNbAuOv2sBq:eFUb0FbKqVObkO9jMNbJWq
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d305da300c36afee698b745c9d03bf5
Files
-
3d305da300c36afee698b745c9d03bf5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE