Behavioral task
behavioral1
Sample
b86022fe405175cd91e59469aef143a3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b86022fe405175cd91e59469aef143a3.exe
Resource
win10v2004-20240226-en
General
-
Target
b86022fe405175cd91e59469aef143a3
-
Size
796KB
-
MD5
b86022fe405175cd91e59469aef143a3
-
SHA1
a117ecaa94f4d2d692afc93599ef036e2ef15937
-
SHA256
c61b02a64661921019fbddc0b98a396b3da1cb5a531065fc66de0c8aa97633bd
-
SHA512
d8e1d3dcc24e903a8ff3baff4ab467c03f9d33b182ad7d374bc7b697fd56c2cd56cb9a1447f9b6ad15b5fb1e326f46fe31915e9393ca67d0eeff3b9e2643195a
-
SSDEEP
24576:j1M+vz8eUtlK938extEQq9yZDnp+bwOXIKIa6N4zYg+HDaX:hMN5tlKVvxOQnWrYsDwWX
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b86022fe405175cd91e59469aef143a3
Files
-
b86022fe405175cd91e59469aef143a3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 220KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 400KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE