Behavioral task
behavioral1
Sample
5092b66e062580ec33414b849d456e71.exe
Resource
win7-20231215-en
General
-
Target
5092b66e062580ec33414b849d456e71
-
Size
1.4MB
-
MD5
5092b66e062580ec33414b849d456e71
-
SHA1
8e775ea583f03d2c17c880ee4d65725cf6a09129
-
SHA256
63afcfe9ace57c8b589f7c8f5b72049e0cf04eecd29f90d202f39263a4826a08
-
SHA512
1a380728352c4e100352a9853d9df6082620933375adaddf27f4d05cd7b8b70755d3f9c84f0d2a88405cb4a2218b2de72eb3963bef9fceb627355d298c07132b
-
SSDEEP
24576:98O5kTpf4o5iSzbiw8sRxWj9fyAJD8+g3Bvl2t1ynmPZN5NIQKgQ2:98Jlff9ib9fy3+gvs8QQ2
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5092b66e062580ec33414b849d456e71
Files
-
5092b66e062580ec33414b849d456e71.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE