Behavioral task
behavioral1
Sample
4cac72e070b6dfdd696ac415587a6e1a.exe
Resource
win7-20231215-en
General
-
Target
4cac72e070b6dfdd696ac415587a6e1a
-
Size
903KB
-
MD5
4cac72e070b6dfdd696ac415587a6e1a
-
SHA1
dcec04c1f493eeb14d0a9e7e8bbbb758d26a449e
-
SHA256
3cbb63b7b739ea13343214e91051e8c165ab2b92f9453cc2ddb33027aae0d680
-
SHA512
16ad6e2d45d7d9bed95eab764a8d48f421f9548dd3f438453a1ade9400c6cbac2ec51504d58e188ad0f49b04f7eac5421bb9a53624751883291a52cb7202a6b7
-
SSDEEP
12288:6LZvaV4VHtjnPhNqcpEn7jeyFDcSntTrg+X5u5BWtJCmIIMkReyaxA09lVVb4izC:0g8Fufjey+ygp4JCC7axvH9deqVU
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cac72e070b6dfdd696ac415587a6e1a
Files
-
4cac72e070b6dfdd696ac415587a6e1a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 596KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE