Behavioral task
behavioral1
Sample
4b4b6588ba53a2f5ddfa04f32c034b3c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b4b6588ba53a2f5ddfa04f32c034b3c.exe
Resource
win10v2004-20231215-en
General
-
Target
4b4b6588ba53a2f5ddfa04f32c034b3c
-
Size
1.2MB
-
MD5
4b4b6588ba53a2f5ddfa04f32c034b3c
-
SHA1
cedc9e4bbcfd9e95c3f117f954db702c59a399b0
-
SHA256
a3c719590ae02982bbd4829cf0bc00c21228a06330cb74bed87e1af0a2be8e96
-
SHA512
92f526baf178e9cfa0242bbf53aecee88904eb51846c10db609c856e265749982ff8890267ddfff8c8444fed5c52443f94c5998635cbfd1322e3f0c30ceaa9f7
-
SSDEEP
24576:Qwtnl35Swu6Gm5XqoJmvyhQp0lF3FXfsrTwlDgZ0m5c8/xFkRuVng0wCwdQi5:ztn7GoQnp0lFpg0l6jYIVjwCdi
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b4b6588ba53a2f5ddfa04f32c034b3c
Files
-
4b4b6588ba53a2f5ddfa04f32c034b3c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE