Behavioral task
behavioral1
Sample
8b96b06363b11492cd2c576ddb45c1b0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8b96b06363b11492cd2c576ddb45c1b0.exe
Resource
win10v2004-20231222-en
General
-
Target
8b96b06363b11492cd2c576ddb45c1b0
-
Size
636KB
-
MD5
8b96b06363b11492cd2c576ddb45c1b0
-
SHA1
28863f53c555b1ae8a8a0e2705aa555cedbcb59f
-
SHA256
ea2b724c1727096cd91510ce363f7e6f26a8290cd7dfb6fe286c4797893b837b
-
SHA512
432f4d3c445e255317a7c9639ff923be842fc5a12d19d26e957ede86817f22ef5d2078a89d1ab16bc327b6737d3df1a448b1f09058b0d701bbf67510476b8c14
-
SSDEEP
12288:9DJB2W6XfMDw4RLKwsGsA2WCUnbsevLta9rS6wdw786aLf1WkWW:Y9EvLKwchUnb7taDBRapWkWW
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b96b06363b11492cd2c576ddb45c1b0
Files
-
8b96b06363b11492cd2c576ddb45c1b0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 212KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 404KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE