Behavioral task
behavioral1
Sample
4e3654ac47e62d55672d76b9abc73a66.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e3654ac47e62d55672d76b9abc73a66.exe
Resource
win10v2004-20231222-en
General
-
Target
4e3654ac47e62d55672d76b9abc73a66
-
Size
577KB
-
MD5
4e3654ac47e62d55672d76b9abc73a66
-
SHA1
0910b479d5073656135927063d98b53694b25de4
-
SHA256
4d37aeab29694b07d4a8d3e89bd75ccaf1b6fd282a5e95b9e8952df118755e8d
-
SHA512
b07fe513e132bd645abf3755e9ddb1cfce9ea8f92997494b30dc8fd7ba4136700a366e87e654cdbff0ab91604f67aef817d8a5b90f12e2956f814d00b291d21d
-
SSDEEP
12288:zvpJIb3+TtL2ypvS1loRfvdTlbTzh/uP1dCtTNQi3huzZl1KRfu:zTQ3QkloRfVTlbTFOPmQ0MFl1KR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e3654ac47e62d55672d76b9abc73a66
Files
-
4e3654ac47e62d55672d76b9abc73a66.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 563KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE