Behavioral task
behavioral1
Sample
3e7bfb628171459ec97f7e9fe060a8cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e7bfb628171459ec97f7e9fe060a8cd.exe
Resource
win10v2004-20231215-en
General
-
Target
3e7bfb628171459ec97f7e9fe060a8cd
-
Size
464KB
-
MD5
3e7bfb628171459ec97f7e9fe060a8cd
-
SHA1
0b4d595daf9616259e0a6281dfb5906aa3c080ca
-
SHA256
ccd8d19f5d5c7dda9c41493157f193ad9a5cca12c327ad2d615263d44a0e5677
-
SHA512
d018c864298c1f2803fb3c7a0cd2817ccca70f17d8d1d3dd2428365c8f89d101e91d64e517a8895d90a9bbab98416b239662c45ecc6bef2c53943678d87c6de6
-
SSDEEP
12288:0LcvsEVCWTeG6dnZkYB1o6WwfPbIkrSHleflTLm9:KcvxFTeG6YgOwHgFITLm9
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e7bfb628171459ec97f7e9fe060a8cd
Files
-
3e7bfb628171459ec97f7e9fe060a8cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 395KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE