Behavioral task
behavioral1
Sample
1412-124-0x0000000000260000-0x00000000009A8000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1412-124-0x0000000000260000-0x00000000009A8000-memory.exe
Resource
win10v2004-20240226-en
General
-
Target
1412-124-0x0000000000260000-0x00000000009A8000-memory.dmp
-
Size
7.3MB
-
MD5
ae89ff6d039cffcb9ae6f7f1963bffc9
-
SHA1
1d89804f316ee07dd62a78aec14b2afd3d28c4ca
-
SHA256
59a9fd2120146fe6837c68db804fe677b422e324fb27ea6eccc6a8f47008cec3
-
SHA512
358a42fecd2e72e9b1c79b1b5cb05d06e96c4eb46ba23d1f942008bd5939bb6d3b30857ccdbe8fd52f62dfea6a9c24ab42a2f0c7d82de27f29296b782ad1b115
-
SSDEEP
196608:eYFBD3TTrVwjg20DcnWMbKrfzVXokN9lammhmG5U:eyBbrytE+Yl1G5
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1412-124-0x0000000000260000-0x00000000009A8000-memory.dmp
Files
-
1412-124-0x0000000000260000-0x00000000009A8000-memory.dmp.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ