Behavioral task
behavioral1
Sample
7cdc6903352c65255fc80ff252635a99.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7cdc6903352c65255fc80ff252635a99.exe
Resource
win10v2004-20231222-en
General
-
Target
7cdc6903352c65255fc80ff252635a99
-
Size
1.2MB
-
MD5
7cdc6903352c65255fc80ff252635a99
-
SHA1
2a573e2b78b5da35a5826a06bbb9a98f2244d04c
-
SHA256
1b8b59b231c1a8cacf0ac5311f5537d612f0768ee7e3d2ff6cd12ef3a8e20986
-
SHA512
b0ea082c676b407efc5807d4c42df7bd2d27daa8eac745c4b7db7f27d840104eaca1d07d64b19eadf444908d6f4edf83d83490eaee5b2087e6f59cd645b26024
-
SSDEEP
24576:092prf6qfaiJqqjhlQbcFbk5Rkg3PHsG07/C6bjky2O/S3u7XT+tkn:O2YqzJqFJW/5jkq/USl
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cdc6903352c65255fc80ff252635a99
Files
-
7cdc6903352c65255fc80ff252635a99.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE