Behavioral task
behavioral1
Sample
682ee9cc7ce2c37d6241bf78d51a8211.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
682ee9cc7ce2c37d6241bf78d51a8211.exe
Resource
win10v2004-20231222-en
General
-
Target
682ee9cc7ce2c37d6241bf78d51a8211
-
Size
1.3MB
-
MD5
682ee9cc7ce2c37d6241bf78d51a8211
-
SHA1
6186408a0cb5a4badfbad62ff4fd23fac53eeb23
-
SHA256
e9178ef2626eec8ff06112874d1037a6fd755fbdda8450b9d6cfd1a32fee9ac6
-
SHA512
7f51c3f507440ef97e46d9b9b58b6131729cc9d74aa9ead59f1c93d430f3d7f48412045e86d5e38fa8e297787a93596753190ffb014acbbfce2f9063803bb273
-
SSDEEP
24576:93Xjhhe4MrqKyOLyiGkIXZffaqG2HXvD/EhEM5u9nrp9sXokVxg4bcp7bxReiWRi:tdorpygnGkIXZffiE/EhLIrpD4bKbbeY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 682ee9cc7ce2c37d6241bf78d51a8211
Files
-
682ee9cc7ce2c37d6241bf78d51a8211.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 148KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE