Behavioral task
behavioral1
Sample
884-205-0x00000000000F0000-0x0000000000916000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
884-205-0x00000000000F0000-0x0000000000916000-memory.exe
Resource
win10v2004-20240226-en
General
-
Target
884-205-0x00000000000F0000-0x0000000000916000-memory.dmp
-
Size
8.1MB
-
MD5
e6715205bb5edd8dc22b5d19c918cf10
-
SHA1
3fe6662457ec63d5e88373cbcdfdaf9c3a99ad0b
-
SHA256
dc36c0cda5cb97629eeb4306cab5aadcf97dd478120bfb51939e9438789f52b5
-
SHA512
727bd1ae01f1ea82d9899cf72c069f4c7aa91fa337a2c4bf92fad052b5386bfc988714abd7b9d374b0afac9905dc060453f8955818a8909d48912b2bd0c15c61
-
SSDEEP
98304:vwMP1cN0a3Nz9YQhV6CPhXWVjtm3D68KJIK0CQzXbgVHlecjeWCargbUYyKxgjf7:gz9HV7Z+j9Z70qlecjeWCPvydjf+8+j
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 884-205-0x00000000000F0000-0x0000000000916000-memory.dmp
Files
-
884-205-0x00000000000F0000-0x0000000000916000-memory.dmp.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ