Behavioral task
behavioral1
Sample
ac2a80589ff240792b30eaac3ca16d1c.exe
Resource
win7-20240221-en
General
-
Target
ac2a80589ff240792b30eaac3ca16d1c
-
Size
936KB
-
MD5
ac2a80589ff240792b30eaac3ca16d1c
-
SHA1
b485be5e7a79992ecd22f672d58b2d67c162b9d9
-
SHA256
9f89d66cd7bdd9e3c38b2d5a67f82714d1ad7074a160c36302cbe775c032bcae
-
SHA512
8fbc3997b3aa1a06fd32e947de5381a4f0c9d3adff82d8259774646213f730b55f6c93831227a72027baacb3d79d8d8dcbcb7d803d0cc82557fdff6c703c8778
-
SSDEEP
24576:MSZ/VZj3lb4pfYJR71WUZpMBULjIfvHUwT86cM9njDXO8/ZCj/:rVRWwP71dpwULIvHU4t9nPXO8/Zi/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac2a80589ff240792b30eaac3ca16d1c
Files
-
ac2a80589ff240792b30eaac3ca16d1c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 141KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 788KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE