Behavioral task
behavioral1
Sample
7b9aaf30223875f91bb820c1a5b3e04a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b9aaf30223875f91bb820c1a5b3e04a.exe
Resource
win10v2004-20231222-en
General
-
Target
7b9aaf30223875f91bb820c1a5b3e04a
-
Size
1.2MB
-
MD5
7b9aaf30223875f91bb820c1a5b3e04a
-
SHA1
7ba01510a4a44db7b123b9f3a38f1a2336665ea5
-
SHA256
c339f3ace802bd21ee715af60ccd09775e02c403bd45ee0291bf289e4f7e3ae9
-
SHA512
4a0d3c7d24f6f4fe39978fedf64dbc52064c6876b8f0cc3af473409d0bf818d2325f75e808f3688b9b749a3f897ccf0e0895952b7f1c3158a680880c266f895c
-
SSDEEP
24576:1b+mKybuDZrB/mRBLs7P+YndKwAPSCdeXWhJ6Xgni7DfA7appf1JNR:1b+mKRDZrBORBwXdhAPR0kDi7DfA70pD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b9aaf30223875f91bb820c1a5b3e04a
Files
-
7b9aaf30223875f91bb820c1a5b3e04a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE