Behavioral task
behavioral1
Sample
bc23080e1b6a6f24f2aa3de8362dd29c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc23080e1b6a6f24f2aa3de8362dd29c.exe
Resource
win10v2004-20240226-en
General
-
Target
bc23080e1b6a6f24f2aa3de8362dd29c
-
Size
467KB
-
MD5
bc23080e1b6a6f24f2aa3de8362dd29c
-
SHA1
30da33a7b0a78507fcfaf21c2bce20247cfdc3cc
-
SHA256
2639683e04e14a2456c5fef6230ebcff7ae0a20a5fb6d08172a3a45b285cf245
-
SHA512
d1cae52b36514cec2464b0640bb8a7a5aa4bbacaadf49b93a290feab04327a0e00f558ab1a32d5e603c128375743a6bbeb3c66bdfc4adee3a3d03fb9411893a3
-
SSDEEP
12288:84yeKDqUSW82y0wcS3qHXPoESoPqRDvWI:vyeKSK3Wk/oAPqR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc23080e1b6a6f24f2aa3de8362dd29c
Files
-
bc23080e1b6a6f24f2aa3de8362dd29c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 89KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 373KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE