Behavioral task
behavioral1
Sample
75c93699ee11d9accb53852b323b976d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75c93699ee11d9accb53852b323b976d.exe
Resource
win10v2004-20231215-en
General
-
Target
75c93699ee11d9accb53852b323b976d
-
Size
1.1MB
-
MD5
75c93699ee11d9accb53852b323b976d
-
SHA1
8818ff368b2486367efafff426ceca26fb929fb9
-
SHA256
9eb1c24154b06bfd2cd8119f9337862bf019bfa7ed4ecf737513d84f3764b3e6
-
SHA512
523b41171630ee040cd7995b81139d7cd644e8c60feab7f26155a628567ecce30f6b949b655c303b59df75f3869b227d87412af189036d86ce89aee3f44cc8c0
-
SSDEEP
24576:i2hiPiPve6Mwxl277d2iDzZWGEyJoyqm21s/ae0dBGl1vlIvVRj:i24Koyl2IiDzZgBg4s/mGl1v+NRj
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75c93699ee11d9accb53852b323b976d
Files
-
75c93699ee11d9accb53852b323b976d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 89KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.0MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE