Behavioral task
behavioral1
Sample
70b01d8214ac8072450dc3ae35781095.exe
Resource
win7-20231215-en
General
-
Target
70b01d8214ac8072450dc3ae35781095
-
Size
512KB
-
MD5
70b01d8214ac8072450dc3ae35781095
-
SHA1
821cbf7dc8e00b29d2105b945515e7f543f59c91
-
SHA256
4fee0b5d7339bc9c76a1822054c4232bac7de07acfd59a1aed90fbfc07bc313d
-
SHA512
af1705c746f80e09bcc146419966dd57b2e4ec301b2523cae5a5b9a6c9d348ed5f89ef4a4be21de64021bbe17071feb07153e38c7852e0cff41b3f8288c14b98
-
SSDEEP
12288:EnulnLFMImjjyP5fds3Z1AHuSMpVK6FZTR5BjmsdTCANoXD:vBFuIy3Za3Mps4r3dTCKoXD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70b01d8214ac8072450dc3ae35781095
Files
-
70b01d8214ac8072450dc3ae35781095.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 128KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 379KB - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE