Behavioral task
behavioral1
Sample
a28d37058530f4b6db7fe5cee24b2992.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a28d37058530f4b6db7fe5cee24b2992.exe
Resource
win10v2004-20240221-en
General
-
Target
a28d37058530f4b6db7fe5cee24b2992
-
Size
436KB
-
MD5
a28d37058530f4b6db7fe5cee24b2992
-
SHA1
562679692d1a0fbe71b124a5d095e2b6916d1c22
-
SHA256
55df0f239185ad5758ab25c20966e9a99a13a5b7af3fa5a6b5dbd601102cd069
-
SHA512
5e5c7d927d8b758924c3f90ef46995cc8822ee7ccab9cdf70957efc420871ae69b1e5ad2ff7333d487863e81b9d56482dc6ed604c376e077b6684e3f3514502b
-
SSDEEP
6144:cRsqpse1lGgNC+qQbaJt6Iz+VdWsu7GALBzePx/DGGDaGtvY2L5RhLrGmRhO:cWY7m+zbaJt+VdWsu7pBKPALG6mMm2
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a28d37058530f4b6db7fe5cee24b2992
Files
-
a28d37058530f4b6db7fe5cee24b2992.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 412KB - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE