Behavioral task
behavioral1
Sample
65a66091c1c49f0ab00cfa2f7635dc40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65a66091c1c49f0ab00cfa2f7635dc40.exe
Resource
win10v2004-20231215-en
General
-
Target
65a66091c1c49f0ab00cfa2f7635dc40
-
Size
499KB
-
MD5
65a66091c1c49f0ab00cfa2f7635dc40
-
SHA1
b87b7108eaee5b78d7666ff0ff20d3d98f45fa16
-
SHA256
b33d364a060c54d2fb0659f03febc4edca78165a050f10c961f853afcf56c3a5
-
SHA512
5f1155cc06c2fd9927dc1ccc0bf75624bab8c4c019e5437dbfa115171f8a8d7b0c70871edb2985b2a604b9db50ca2d91d8e3644879c2e1613d5cf6a6e56474c4
-
SSDEEP
12288:mMER3hF5vmnxGXmoMBVVxYLqmY07YTPuReH/HB7ODCloZ2D:zER3hFdmnxce7VuE0CPuRefROD4oUD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65a66091c1c49f0ab00cfa2f7635dc40
Files
-
65a66091c1c49f0ab00cfa2f7635dc40.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 45KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 369KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE