Behavioral task
behavioral1
Sample
3fb8b6a440471edfb0b15b21abfbdbff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fb8b6a440471edfb0b15b21abfbdbff.exe
Resource
win10v2004-20231215-en
General
-
Target
3fb8b6a440471edfb0b15b21abfbdbff
-
Size
15.8MB
-
MD5
3fb8b6a440471edfb0b15b21abfbdbff
-
SHA1
8b37ef39d54af92a5e3be8b84e6925fcfe2e9d12
-
SHA256
abf83c3cade3208af63a4ade3f15b02400bda07177580d13e635b023d5b26474
-
SHA512
d1d0b5ee2bf37bdd17df7de83874f4eb7201e94a5daf750edbc536a99029c972451ca5fe10f44bf7f2ad95dd2b207cc1c64c26e817b3d680e5eb5dab62875582
-
SSDEEP
196608:0h/DstTGAbAU8Bj8qlEtfjWHB6MON6atJx71eRf+urYgUE5Pr:0hgT/fj2B6D6QfJW+urYgUU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fb8b6a440471edfb0b15b21abfbdbff
Files
-
3fb8b6a440471edfb0b15b21abfbdbff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 408KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4.5MB - Virtual size: 13.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
*u��瓅 Size: 2136.1MB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 493KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE