Behavioral task
behavioral1
Sample
be14894cb43f7196c829e6808b1b3f4a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be14894cb43f7196c829e6808b1b3f4a.exe
Resource
win10v2004-20240226-en
General
-
Target
be14894cb43f7196c829e6808b1b3f4a
-
Size
1.2MB
-
MD5
be14894cb43f7196c829e6808b1b3f4a
-
SHA1
6ed73dc3cef836a2793338e6039ab2863dc53ed7
-
SHA256
16faef84c7f9d8bda26ba97c12e91f6999f106a2462072210b82a6e86da71e3b
-
SHA512
a34c2ca1e8ec7673415356c2e04519a433a9ff71ad5a7290fadf331435dad7b138143c71e8fdff81634c17745a0a81a74bea62b489045c69b620702b16e5331b
-
SSDEEP
24576:uEMp4MK0yFGNtfLfctX2Tor2cRj+KwnxXfVD0RnyO88sXD/:d6vDtfoicbwnxXtD0F/8n
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be14894cb43f7196c829e6808b1b3f4a
Files
-
be14894cb43f7196c829e6808b1b3f4a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 85KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE