Behavioral task
behavioral1
Sample
675d2978437bacb8830bc57cb492a7fb.exe
Resource
win7-20231215-en
General
-
Target
675d2978437bacb8830bc57cb492a7fb
-
Size
1.5MB
-
MD5
675d2978437bacb8830bc57cb492a7fb
-
SHA1
4db11a0f6229cb2dfbef1d17ba3153bc48de0318
-
SHA256
417c0e5d0e0a59410ce71c369b44166df5216221413bba80a54b8cd540b11e96
-
SHA512
98e696a963b77993a9ebe95279b9b98b8891ae3c2d699f83d13499a457ec1da20db829738bc24b25dea249ef4469d2d9ce4a6e13734addee7614e4e539705cef
-
SSDEEP
24576:WSMua5kT65WEv7koI1OmRnrG2mBWyyV5jp1l8DFsVBOgeUxS2DEarX9QmGNVrLGC:W7Cu5WEvY4mpakyyV5NGkBO2xS2oa5a5
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 675d2978437bacb8830bc57cb492a7fb
Files
-
675d2978437bacb8830bc57cb492a7fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE