Behavioral task
behavioral1
Sample
izabelle.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
izabelle.exe
Resource
win10v2004-20231215-en
General
-
Target
41301f98f2bd12fda932a6f7343d6d60
-
Size
1.2MB
-
MD5
41301f98f2bd12fda932a6f7343d6d60
-
SHA1
7f8beeaee61bbfc9d6ea551c304a85ba7b0add33
-
SHA256
23e07dc53e9e27dc8a39b1597519b208f898e4f52ddb3d8c8d49403e137fa69c
-
SHA512
e223f499a7da2ca46206befbf2f5e66361e69d1eab262c58e7ba52fa8fed2f1f38b986735ba8178dd0ffe44867b17e179686cb08d58ff5fb3a2593ddb32c1d18
-
SSDEEP
24576:uZL8Qt+6MaEQSly8S0bFsf4/FI+iNSpt/IDg/1bHHnudIHMIKwQZF/J:aL8Qtea/eBS0Kgtd7ptL5HHnuGsILej
Malware Config
Signatures
-
resource yara_rule static1/unpack001/izabelle.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/izabelle.exe
Files
-
41301f98f2bd12fda932a6f7343d6d60.rar
-
izabelle.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE