Behavioral task
behavioral1
Sample
746153da1e19bf4e94d99c3f234a3507.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
746153da1e19bf4e94d99c3f234a3507.exe
Resource
win10v2004-20231215-en
General
-
Target
746153da1e19bf4e94d99c3f234a3507
-
Size
24KB
-
MD5
746153da1e19bf4e94d99c3f234a3507
-
SHA1
44ee633a9c5925ec15772b2678e8c1aef68bd966
-
SHA256
ea9ec67e0e40e3da08799b0867965e35fc2485cb653319982302e873f2baa740
-
SHA512
19bb66787a5e1af49b48ba9af198e871b2d676984e7b4fa39fd7762b1a00d1133bf672334da99fa1b69ee62d66cf3ece444d7551113ff143160b38be6c22e25d
-
SSDEEP
384:Sgr6L6owL3XHyWn1WfCljArAXxIX9qFhsUpuOh6SvAC9d724NHctIzkb:b2mVXSiM1iIX9qFKUp6Sn9djhzy
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 746153da1e19bf4e94d99c3f234a3507
Files
-
746153da1e19bf4e94d99c3f234a3507.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 313KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE