Behavioral task
behavioral1
Sample
52499312c478ac232b17ac1aa5be3bae.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
52499312c478ac232b17ac1aa5be3bae.exe
Resource
win10v2004-20231215-en
General
-
Target
52499312c478ac232b17ac1aa5be3bae
-
Size
1.3MB
-
MD5
52499312c478ac232b17ac1aa5be3bae
-
SHA1
2e69457d3c4891bafc6b945519d3f026e0c82a56
-
SHA256
4ef8d374ce4610b3682ec7a5309a72f3403ba779073134c92df9a1fe8d7ecb31
-
SHA512
b337dfb609336fee3cfb46f7ce8ea988664248a3fd18f9a3fb559e0e40b2207d51d748f4cc12d86c7927f195b119921dfc0043d9fff4f0b44a90f62fa6cde6db
-
SSDEEP
24576:EK+yZ71uedyY+5iVVfXPZliMHxMI2NQQvHE7Db6pUL/re+17iscGL:EKh7Qoyf50ZJWEDbSCDf0M
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52499312c478ac232b17ac1aa5be3bae
Files
-
52499312c478ac232b17ac1aa5be3bae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 114KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE