Behavioral task
behavioral1
Sample
8d1f0fedfa64efe176ce1de40bb9444d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8d1f0fedfa64efe176ce1de40bb9444d.exe
Resource
win10v2004-20231222-en
General
-
Target
8d1f0fedfa64efe176ce1de40bb9444d
-
Size
1.2MB
-
MD5
8d1f0fedfa64efe176ce1de40bb9444d
-
SHA1
74696b94a62dc44beecde16fa978c270aec998fa
-
SHA256
3461e74bb69ba58431a810bfbd928d0246cef6e2b1764caeba953d77ba6703d9
-
SHA512
9a7a8e6c23bee57e8079ae497af77358c29bd98b1145506bede9029fd50014753a044c76cb5580641127c82a80c81f1378c53c3efc128908c94304248a6fde59
-
SSDEEP
24576:VS3xZwTvjQI7xs7iVUMZbrg5INvcd3mawCQLczBVa289oak7ApxKELG49Bv9t52p:8M/QI7xs7iuMZbmevaWawCQLcFgDFbpS
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d1f0fedfa64efe176ce1de40bb9444d
Files
-
8d1f0fedfa64efe176ce1de40bb9444d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE