Behavioral task
behavioral1
Sample
615c9dad89efa891034b8f415323e924.exe
Resource
win7-20231215-en
General
-
Target
615c9dad89efa891034b8f415323e924.exe
-
Size
1.3MB
-
MD5
615c9dad89efa891034b8f415323e924
-
SHA1
58fc13c40dbd3383c05890255aac0d906c3e00a8
-
SHA256
5a04916e08b729701b2e5e43a17f9cc33c04b61f20008ae9f3d2f20ce94d4495
-
SHA512
235ffbbdb1d0f28976ca26d691f19ad101c71bb80168722321bd0b1ed145859a787150dd17a22efb511dc77add07be14a7690e208ae37864862fc48be1f2cde2
-
SSDEEP
24576:5Gn4hZ4QDvdoF7FbYiEOkuqr49CyiFBu3mjs9r9RUOzZ2797+KNHJ1Vnb:5GsLd+x0iEOlELFBIH9gOl27xV1HV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 615c9dad89efa891034b8f415323e924.exe
Files
-
615c9dad89efa891034b8f415323e924.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 378KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 332KB - Virtual size: 790KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 630KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE