Behavioral task
behavioral1
Sample
458b6f234cb492f48aec0a719f943395.exe
Resource
win7-20231215-en
General
-
Target
458b6f234cb492f48aec0a719f943395
-
Size
548KB
-
MD5
458b6f234cb492f48aec0a719f943395
-
SHA1
5db27d9972198e8967b7fb7c90673ae5c325291a
-
SHA256
ba0eaed830fc32c98db05b602362a2abfcdb625686690e85275b25298b0bbfae
-
SHA512
c90fcb3612facb53099c677956d342884c33c6a3a5787c81f8fcd9ecfcb3a8b9c12f140319d4e294c615f2d969ce1ef69035144e6a18e07425bb42a54b71b07c
-
SSDEEP
12288:7I5lKSoG9y2Eb0JGQHb4iim3Uaq/Nul50JkMz8jxCl9WNJ26e:E5lHb02IwUIEzoSS5xme0
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 458b6f234cb492f48aec0a719f943395
Files
-
458b6f234cb492f48aec0a719f943395.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 495KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE