Behavioral task
behavioral1
Sample
70811d9954a62bc1f730e7096085cf5f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
70811d9954a62bc1f730e7096085cf5f.exe
Resource
win10v2004-20231215-en
General
-
Target
70811d9954a62bc1f730e7096085cf5f
-
Size
3.0MB
-
MD5
70811d9954a62bc1f730e7096085cf5f
-
SHA1
54f6874b56056dfe540338e09be169afd76c7245
-
SHA256
356492e8cbd221d5b48eec186bc0b1a5f8422589d1a11eeb0fdfd89353392154
-
SHA512
a1efbf13fdc7ecb93b3a770d1df785b1e5d8929d6602f4f4f19ad33f630bc6e88fc596874c835dc590dc39ae299fc2088ee36bfc7443dbbbe35e543a3212c8e4
-
SSDEEP
49152:Fz7HbwtOKnH5J2wSgLW7JwRq8nXc1f5ggXjIrjA50Vxj1VhducS6EdfMFuCeOtKB:FPbwtBZJfSKW6RqiXwggM6E1ocbnO
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70811d9954a62bc1f730e7096085cf5f
Files
-
70811d9954a62bc1f730e7096085cf5f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 395KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.3MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 383KB - Virtual size: 904KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE