Behavioral task
behavioral1
Sample
a22d271b38d38c79a8188c18ef7db4af.exe
Resource
win7-20240220-en
General
-
Target
a22d271b38d38c79a8188c18ef7db4af
-
Size
988KB
-
MD5
a22d271b38d38c79a8188c18ef7db4af
-
SHA1
45e0d24bc38670d00084b943fc0a932f86f2fc76
-
SHA256
7e0bf1d75bdadd6bbdfd2250148be9ae06678b60937643da5ffa7607bfa5fc17
-
SHA512
fb6680285510dd89669ac8bd5b9a274e6303222b0dd6f495442c8b793a5011396e482270cd89be1eee743d40270ea509bffaaa40b6eaa32158ffde30f9d3d346
-
SSDEEP
12288:HbQq9ZxvxeLS49axeKAgV15cQbWyChHG6G5S0VyyDaiuDNTQYv5KUJAVRzyqjNgK:dtvMS4HgV15VayQHCVjDaiqTH5/J4a8D
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a22d271b38d38c79a8188c18ef7db4af
Files
-
a22d271b38d38c79a8188c18ef7db4af.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 212KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 740KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE