Behavioral task
behavioral1
Sample
97145bf79dc0a4940470eefc7216f629.exe
Resource
win7-20231215-en
General
-
Target
97145bf79dc0a4940470eefc7216f629
-
Size
1.2MB
-
MD5
97145bf79dc0a4940470eefc7216f629
-
SHA1
6357f5046fa82097bf828272300b721b60639760
-
SHA256
ac0e608d4ac76a27f9ec7a5742af0ef30c082ca5e838584329dbcfb95b21edcc
-
SHA512
d5cf8bb3f2f9acaa2aa2cd39dcc04ed7433fc91237c50e7a8a3742590d219df2cff7d207a998106d36141c2da83833c6a03a6fcf13ca5acfd360b277e424df78
-
SSDEEP
24576:V6U3BumSm1YBN591KxFLJuPBuLAvI5muVMe7eW9Evw4EwuuiKIY:IUxumSItx9JuPBFy35B9EnEUiS
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97145bf79dc0a4940470eefc7216f629
Files
-
97145bf79dc0a4940470eefc7216f629.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE