Behavioral task
behavioral1
Sample
772fd716b9519f9a9e1fb344d0ca7d7b.exe
Resource
win7-20231215-en
General
-
Target
772fd716b9519f9a9e1fb344d0ca7d7b
-
Size
2.9MB
-
MD5
772fd716b9519f9a9e1fb344d0ca7d7b
-
SHA1
e6c411b8e7168c52c9f4b9442c4fdbf1dec10b80
-
SHA256
301e9e53d726463e2a4876038ead2512f904dfb9eab17295bf52213a039643f1
-
SHA512
45440b719c2f29e906432903bcb3918c649e78ae1281a54b2b2588046d768b5a3c111786db7116fbdf7de1e1065e3088894250ff2cce658168299b9dcb21663b
-
SSDEEP
49152:Ljah5eGt4zyvnRRVxvadStn7NtqUouH2xDpQsVheT1Bf+fPmHAkjJyLtTp7I0hH:qmGeKRVwHUvH2xDGsXkoPaJwtx
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 772fd716b9519f9a9e1fb344d0ca7d7b
Files
-
772fd716b9519f9a9e1fb344d0ca7d7b.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 341KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 30KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 97KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ