Behavioral task
behavioral1
Sample
96924f294a4ce279c69b7c932fbff448.dll
Resource
win7-20231215-en
General
-
Target
96924f294a4ce279c69b7c932fbff448
-
Size
587KB
-
MD5
96924f294a4ce279c69b7c932fbff448
-
SHA1
b7e0a9b6828ffedc375c3d22468ad0c5b26ffc52
-
SHA256
2138deea64ae3fd7ddf0a09a27e6522ca3c29d0a36bfe460b4411aa5324fedd8
-
SHA512
6aa008498239ae14732e9a2617e199c93e9beae8726435fda0b6d8bcf0edef47b7bd1a321355ed28302a4b5e63f89cb688f28b6c0e7fe1868396e1a35f4dbcf4
-
SSDEEP
12288:svFVXzhrSP24zPKLHpprdlCFQiggilOAI/fYDXQdWHIn:sv3zZSP24zCLHpZODilyqQ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96924f294a4ce279c69b7c932fbff448
Files
-
96924f294a4ce279c69b7c932fbff448.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 19KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 563KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE