Behavioral task
behavioral1
Sample
7921941dfa8e0c8279ffa1e4fff1a654.exe
Resource
win7-20231215-en
General
-
Target
7921941dfa8e0c8279ffa1e4fff1a654
-
Size
2.9MB
-
MD5
7921941dfa8e0c8279ffa1e4fff1a654
-
SHA1
4f505603cb319773633acba645ca754037df9e16
-
SHA256
69ceba8b39719c757096d6979c8100c4a281efb253b995cfe4477ac174898383
-
SHA512
e7e6cdb1b9727169f5d96a941f277a2d6d47b3625e2e77da99cecec39f4adf9ba66d834d4728d278141ec8745a400edc78afc87579cb1f81967956e30cf6c8f2
-
SSDEEP
49152:8+8IPBm/7iZBbxqCghyHfMm+UbE9ETZOIC7pR0eyb1CDDoiu2kVwcVHR7eA7+VSz:8+/S2v9QIfFEsOICNOeSCD8i1qHZeA7x
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7921941dfa8e0c8279ffa1e4fff1a654
Files
-
7921941dfa8e0c8279ffa1e4fff1a654.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 288KB - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 47KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ