Behavioral task
behavioral1
Sample
89d8c6f82bba390b6a8e1e581b3919a2.exe
Resource
win7-20231215-en
General
-
Target
89d8c6f82bba390b6a8e1e581b3919a2
-
Size
956KB
-
MD5
89d8c6f82bba390b6a8e1e581b3919a2
-
SHA1
2a256fabd579d8e79d8bd7e2e44ef39e449aaceb
-
SHA256
6fd9d0c6040e32ad5924e88886b0fba85c97b11bd563645d2b92890072f81be4
-
SHA512
faab84caa57b78d6388e7e2e3fdca12f838d5f955dd8b6fe8e52268b4f633a1672a439b0baed8e31604ff3471ebaad2d31f64ce91d0fc97b160d6398fc185426
-
SSDEEP
24576:PzHYoy37YMjZi6vpjARQkA6Jo9PUQXmYeXT/qgQsgj:rHYoyMMdiUcRQqOiQWYeGDsg
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89d8c6f82bba390b6a8e1e581b3919a2
Files
-
89d8c6f82bba390b6a8e1e581b3919a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 144KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 644KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE