Behavioral task
behavioral1
Sample
427d5ed2295ae8abe76fffcf1ceae9da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
427d5ed2295ae8abe76fffcf1ceae9da.exe
Resource
win10v2004-20231222-en
General
-
Target
427d5ed2295ae8abe76fffcf1ceae9da
-
Size
5.0MB
-
MD5
427d5ed2295ae8abe76fffcf1ceae9da
-
SHA1
38e5345cdccbd55ee29147866ed2a67bd6d958ce
-
SHA256
c3d66b3ed5a8668c11b01be2ef4ce9e921645e5e7be48d25626f6540ef62ca8e
-
SHA512
422118c028d4fdc2793000142471a591427dec42bd68d40e1bfe3b733136df42ff80bb8f7aa7abed82f138ef50ffb62d27f06e7fd7e16511bb1c7650f0552f69
-
SSDEEP
98304:kQV64Ybbk505M7OJxrfsoffLpFSmUCTxXU6u7lPeSaNgCSZwenz5r:k6NYbb4mrrzpvTxXU6elPLgfwwenFr
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 427d5ed2295ae8abe76fffcf1ceae9da
Files
-
427d5ed2295ae8abe76fffcf1ceae9da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 365KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE