Behavioral task
behavioral1
Sample
5ab32d91b060d165befc987ab2c10ff5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5ab32d91b060d165befc987ab2c10ff5.exe
Resource
win10v2004-20231215-en
General
-
Target
5ab32d91b060d165befc987ab2c10ff5
-
Size
1.1MB
-
MD5
5ab32d91b060d165befc987ab2c10ff5
-
SHA1
d656e6c3606236a0bad7d8199a53ba8e21f4e979
-
SHA256
a7d363ec03ce44132dd5ea4053dae3d2a0910b01e279935f35dbf6f70c2b27e5
-
SHA512
b9788a8438124517b9b36543d815f29e6fb35f565e2e96ce84a6577933da4c855c8fc2b52fa37a2bcec0b12b4c0cae9ba8b4fb6c005dc9d1658452291a844a69
-
SSDEEP
24576:T8wTXqnSnfVpxjzlzlGfuw8xnGC8S0Q8CL8Kl4MM:THTsKVLX3w8V8CL8K1M
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ab32d91b060d165befc987ab2c10ff5
Files
-
5ab32d91b060d165befc987ab2c10ff5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE