Behavioral task
behavioral1
Sample
51b3bafd9e49b8bf78e2a2a76f670477.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51b3bafd9e49b8bf78e2a2a76f670477.exe
Resource
win10v2004-20231215-en
General
-
Target
51b3bafd9e49b8bf78e2a2a76f670477.bin
-
Size
1.9MB
-
MD5
51b3bafd9e49b8bf78e2a2a76f670477
-
SHA1
555cddfafd60bb1fa7ee35f07ff699fd1c653f36
-
SHA256
221efd7092c97bbe25e4efd1844a0eda899cbe58300083786dc5872e64513141
-
SHA512
764bec886e8aa6a46db587c5019f37e9d74f9922c9d31c5e900e0ab7662b8f6d3b8a2bbfb9392640a251e5ca49349d4dd144df32567961a2867087b761de1379
-
SSDEEP
49152:16ex9tGVBpYOqgcbfpc9pNKGsLCNR/qDgLN/+Xyte:kOtGbDnmpc92T8R/qD2NGXX
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51b3bafd9e49b8bf78e2a2a76f670477.bin
Files
-
51b3bafd9e49b8bf78e2a2a76f670477.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 388KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 537KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1002KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE