Behavioral task
behavioral1
Sample
9c1d6d1ad065d8a3494bba5d9c81ab08.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9c1d6d1ad065d8a3494bba5d9c81ab08.exe
Resource
win10v2004-20231215-en
General
-
Target
9c1d6d1ad065d8a3494bba5d9c81ab08
-
Size
1.5MB
-
MD5
9c1d6d1ad065d8a3494bba5d9c81ab08
-
SHA1
ed99c94115c92a926cdc92079f2c76dfad1af31a
-
SHA256
9757e25c86d6abf52addd51d39815e6a94eeb28cccde1238e84636c48c14371c
-
SHA512
7b5eb461881401eb4a13951fc85013b517eb6b2be077bdc34db527f2b21a2dbe28136a2eae6f4b5edd5b3715808c5293418e292a2ef19317d1b20179f1f93919
-
SSDEEP
24576:pBi1RFPaK+9UcPU8zqip2kfXok1i+vgMrZnbircEhkCJycqKek7:pBiPFCK+2L4WkfXnYgZnslqKe8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c1d6d1ad065d8a3494bba5d9c81ab08
Files
-
9c1d6d1ad065d8a3494bba5d9c81ab08.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 313KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE