Behavioral task
behavioral1
Sample
48c4721cb04ef16ef8e629f00b9acb10.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48c4721cb04ef16ef8e629f00b9acb10.exe
Resource
win10v2004-20231215-en
General
-
Target
48c4721cb04ef16ef8e629f00b9acb10
-
Size
1.4MB
-
MD5
48c4721cb04ef16ef8e629f00b9acb10
-
SHA1
b63e1d55bc36e48ea74027ed8a534ffddd0c881a
-
SHA256
35e6233058724de49403c2b859747401ff08e05fd8a0d435394ed6104a916ac1
-
SHA512
153378126bf4ab99ad5ba7d033eca3762c51e2ea15248f85e89d48ce23f4296966964198cda6ea0a48b3c47992aea4cc6ee4b1058a343e67304039d259d37542
-
SSDEEP
24576:5QsfPLUDmuMsNrYkw55E5ZjgfHboxNAfumOCpefqHNlASiPZBW:qS7uMArM55E5ZiMefqC9NyHZI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c4721cb04ef16ef8e629f00b9acb10
Files
-
48c4721cb04ef16ef8e629f00b9acb10.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 310KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE