Behavioral task
behavioral1
Sample
7bd01947cc4be622bf6dd36b64e0c292.exe
Resource
win7-20231215-en
General
-
Target
7bd01947cc4be622bf6dd36b64e0c292
-
Size
1.4MB
-
MD5
7bd01947cc4be622bf6dd36b64e0c292
-
SHA1
ec7cf8bb0f337ad4653d85c33aa6eb92629afb93
-
SHA256
ffc0f7b9c46f3729591b1752e78cde11b9b55c1a844e2e21d51ab5ae78556ba8
-
SHA512
77bd60c705a88b7e656ef9fc286ce42c4cdfcead796884a301d750e0d799d6f213e04cd13d1fba32c15763ca8f0b1270cb39c342e68bd33d153eb3c14e82f8e6
-
SSDEEP
24576:5Vxnu35kT9NBNmYjWzSKtKiOdvBS/h1UnfIoYduZC7Ud0ZS2P5hF8gjxbJBBcFRE:Nu65NfjWiiONyOneuhdubPPF8gJJBy3E
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bd01947cc4be622bf6dd36b64e0c292
Files
-
7bd01947cc4be622bf6dd36b64e0c292.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE