Behavioral task
behavioral1
Sample
aa34b9b21d8bc868200140eec27da5b1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa34b9b21d8bc868200140eec27da5b1.exe
Resource
win10v2004-20240226-en
General
-
Target
aa34b9b21d8bc868200140eec27da5b1
-
Size
1.2MB
-
MD5
aa34b9b21d8bc868200140eec27da5b1
-
SHA1
e9e0f31b661b9706d49d2d55253e76abefc56927
-
SHA256
aa118af08f77911f3ac5164ff08ea73f8bf57d34e04b4cc7f494f579eed1044d
-
SHA512
26d3b6ec0848ba34963c77ef86ba356909d9e101937ca8cce4c10ad9aa6e134d9fd84b94466795b42facb88f2a496affaf932f7dbd5d6dd82ec362c12fa11444
-
SSDEEP
24576:Vf9+l979+Pb76stPgq/jz+OAXoOA8tznPC4Xhsf0UlMPd0g6+qtD:VF+lZYDOa/NAXoO/69cUlMl0v+qtD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa34b9b21d8bc868200140eec27da5b1
Files
-
aa34b9b21d8bc868200140eec27da5b1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 14KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE