Behavioral task
behavioral1
Sample
5a01ca0e43b91c3fd58b90f5a04990c7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5a01ca0e43b91c3fd58b90f5a04990c7.exe
Resource
win10v2004-20231222-en
General
-
Target
5a01ca0e43b91c3fd58b90f5a04990c7
-
Size
1009KB
-
MD5
5a01ca0e43b91c3fd58b90f5a04990c7
-
SHA1
8ddf99fe6ad4aca24ea591572e3bd7ad2f5a07bc
-
SHA256
20810c0cf24de1a52a773e4f0f29ff20faf0c24c05f9e5c6aa0169ebb5145399
-
SHA512
6279f17a346c93a89f20ef6c816db0c8a5a4a219933042d95e70b39d6509d7072037e5d711064b59364b8344f40f412f239abfc793464e977e18afe11de3a99e
-
SSDEEP
24576:uo3cjqNrNLn3BHuQpI0MwTeqVGA+mWGqL0WFfkasJI:uNurx3ppI0Mwa6emuL0WFfkawI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a01ca0e43b91c3fd58b90f5a04990c7
Files
-
5a01ca0e43b91c3fd58b90f5a04990c7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 951KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE