Behavioral task
behavioral1
Sample
75a0b5149d82ad52838c5d89da3c1d89.exe
Resource
win7-20231215-en
General
-
Target
75a0b5149d82ad52838c5d89da3c1d89
-
Size
1.4MB
-
MD5
75a0b5149d82ad52838c5d89da3c1d89
-
SHA1
d3092a6e5476f0955f4eac565a520069328e0948
-
SHA256
d47c35b9342fb8c181ce0d2ca7a9b91065adf8bda8c793c09f614d23a70d8a2a
-
SHA512
badbce59b98b97068995d4a670ff06671fa45db0eec235b8c5d27194dfe3110b477b7f97eaec41d61c3646879b07f66033939d13b18e5b7fba4decb2ee5977db
-
SSDEEP
24576:slbRUyb2oyZ1rdHgCu4oK1I+zZMZaPKLQXuXujAnO6eWe0LjlEQfARoa9:UUybE3RHgCud+I++p8XuXJq8l9Fa9
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75a0b5149d82ad52838c5d89da3c1d89
Files
-
75a0b5149d82ad52838c5d89da3c1d89.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 114KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE