Behavioral task
behavioral1
Sample
4f59b29ea064ee7b91cd55b3ab0ae182.exe
Resource
win7-20231215-en
General
-
Target
4f59b29ea064ee7b91cd55b3ab0ae182
-
Size
426KB
-
MD5
4f59b29ea064ee7b91cd55b3ab0ae182
-
SHA1
17de7cf698035792d1b09b8cfb432b39d04f30d7
-
SHA256
d580ab5d0ee7360a70c5bb431787f4c34558af7a1889fc57f811c7ed2f21f8da
-
SHA512
ae0a1174c67d7fd9e60c498280fb014ecfe40900e4807db5e584326e36618eb8c464e022b43441a22cf960db04565112750c8704027bb016f3ad669ea60dfc23
-
SSDEEP
6144:MSciOEisL4BRgGIN1GG3yjHwcYwQWxT7zNs5WByqmA0EjZ4GH8v+yEpb003pnL+f:cI2X1G3AHwcYQ91s0Mq2EjZ1He74+f
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f59b29ea064ee7b91cd55b3ab0ae182
Files
-
4f59b29ea064ee7b91cd55b3ab0ae182.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 86KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 335KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE