Behavioral task
behavioral1
Sample
3f97c18b3e66b47b202905e9bf89ad28.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f97c18b3e66b47b202905e9bf89ad28.exe
Resource
win10v2004-20231215-en
General
-
Target
3f97c18b3e66b47b202905e9bf89ad28
-
Size
1.3MB
-
MD5
3f97c18b3e66b47b202905e9bf89ad28
-
SHA1
330fd42a2ba365997f2172c26a6555902b5b1efa
-
SHA256
bb2fadc8cb74d8893cecc3f241bfe02bd470f483f545a3933f7104a42d9b6d73
-
SHA512
39e1e9f7742b88ffc0430110a00e446ebb9a5789b447a7b65b7a50d2f2ff7f360660723bf7fbff0f24818d0373c67a99eb89dc31632c80cbf3ba8ee660cbfb99
-
SSDEEP
24576:Yae3E1+7Y4koSehZKTPPwa+dlzKRksaJ7C+H1Vc:YE1+tUH4eq7ZPQ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f97c18b3e66b47b202905e9bf89ad28
Files
-
3f97c18b3e66b47b202905e9bf89ad28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE