Behavioral task
behavioral1
Sample
64f241e9c5a86dd8b6f53841b784ed6c.exe
Resource
win7-20231215-en
General
-
Target
64f241e9c5a86dd8b6f53841b784ed6c
-
Size
688KB
-
MD5
64f241e9c5a86dd8b6f53841b784ed6c
-
SHA1
2621f2ebd8104df705eeddec8a048b29d439c298
-
SHA256
4829ac01dbb38e3f5e7f5b4801565f188a99f54b636f25c91c8350095c8503e7
-
SHA512
809c73d9fe34b37fc2846b1d538f93e5e53dca9d52ef36898e2100f914e584076d08ed18dcbf94277de0b36c0d5e655b38a77ff32694db6a07b1d3c41afc0b9a
-
SSDEEP
12288:/plT364qwHC8YqTaonnsCNbqqPlnGlaEoEjF/ijF0ulOcNQYOWvURTY/eQuTdOOO:xsNcYkaonsybVPlnGlaEoccF0uocNQYf
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64f241e9c5a86dd8b6f53841b784ed6c
Files
-
64f241e9c5a86dd8b6f53841b784ed6c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 555KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE