Behavioral task
behavioral1
Sample
45925892af1ea94d512efcc86e3dcedd.exe
Resource
win7-20231215-en
General
-
Target
45925892af1ea94d512efcc86e3dcedd
-
Size
6.6MB
-
MD5
45925892af1ea94d512efcc86e3dcedd
-
SHA1
ac0ca0619f1e080aeaa52785088c5c208786122d
-
SHA256
db1f6c12c35baa5cda6922b71116000f53fe8b080a94eecdea21e1143fd47f9c
-
SHA512
f541219a0ca1080f9452650001491992ed8be2f0862cafc19fafc4c6fc4d633662475955d5ff7b7e231ec41838d2f3292f398185c3d4cfeec605e6fb4e5a7c4d
-
SSDEEP
98304:v/yOr7T7SGL9I7ka8EjuxMuEBj6pd9g9J6xE3VSW18sSvWWbeWomMd:Hy+eI9Ja8Z+A61SBsSuWbFMd
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45925892af1ea94d512efcc86e3dcedd
Files
-
45925892af1ea94d512efcc86e3dcedd.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 653B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 7.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ