Behavioral task
behavioral1
Sample
bfed6077333269723382a52bf3d6180f.exe
Resource
win7-20240221-en
General
-
Target
bfed6077333269723382a52bf3d6180f
-
Size
909KB
-
MD5
bfed6077333269723382a52bf3d6180f
-
SHA1
bb4f1e4f7789f80ff2badd209ff8ad9822aaa758
-
SHA256
2ed38228b046918d6e7771c1f912da09d6aa2b8d5f409a8fe303b343d3c3f752
-
SHA512
011810ab8a811f24504f5e4556107154fb80282d172c4d537cc8db8da8b8be549fc5cdf5b71f162de782e6a2bc3aa32a176b7d9f50acc5c91e2c752defb74ff9
-
SSDEEP
12288:OeVwYfmolhCaodBB2u8+DDNkDTTR5UXv0eKHwzB0wdt553OAwNeeS:OeVwSnhCa0Bc0wvUXv0wzB0xAKS
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfed6077333269723382a52bf3d6180f
Files
-
bfed6077333269723382a52bf3d6180f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 556KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE