Behavioral task
behavioral1
Sample
1724-127-0x00000000002B0000-0x0000000000EA0000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1724-127-0x00000000002B0000-0x0000000000EA0000-memory.exe
Resource
win10v2004-20240226-en
General
-
Target
1724-127-0x00000000002B0000-0x0000000000EA0000-memory.dmp
-
Size
11.9MB
-
MD5
3dd8e77d62990bec729027af7e34c25c
-
SHA1
bb56c815fc723779baab7fb89399c98bea8d637e
-
SHA256
273fd143c0f15db178535c274d9a6d7752697c2f1831f0546de39194c481bb56
-
SHA512
1ca6330a2c8bce904a4f343a5d326b6a33e8cacafafc4a9f82aee70e2e68bdb7fd03900ad9648d9c16111610efd943712494be8645890311e1613ba75d167792
-
SSDEEP
196608:+OfrPB46nU6lzje+CtrDXXTUPSPS4p0r3Vm9XysN5ERMCJaQCn0:+qjnU6lzje+CtrDXXTUPSPS4WryXyVR6
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1724-127-0x00000000002B0000-0x0000000000EA0000-memory.dmp
Files
-
1724-127-0x00000000002B0000-0x0000000000EA0000-memory.dmp.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ