Behavioral task
behavioral1
Sample
c0492eeebe3fc2accbfbac94ab3e93e1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0492eeebe3fc2accbfbac94ab3e93e1.exe
Resource
win10v2004-20231215-en
General
-
Target
c0492eeebe3fc2accbfbac94ab3e93e1
-
Size
1.1MB
-
MD5
c0492eeebe3fc2accbfbac94ab3e93e1
-
SHA1
4a447f0965f140ecdeea9e74553ff287f578149b
-
SHA256
ffa33df54bb1902466a73a138e32fe27f33371fc968836ac1e62e0511adf123b
-
SHA512
fda40eb18309b862702674c27921f5191ffb7094857dad7afa3e904fff01d94ec1dc698167a7a3353919e55a7cecdda7a59de93deac2fc78c85bbe3747e2d1e2
-
SSDEEP
24576:u0FSsvwOnpgveGc/6tzdijJG/k2JI1X+vfBhyTjBQS+U:xkLI0eAyJGk1O3BsT1V7
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0492eeebe3fc2accbfbac94ab3e93e1
Files
-
c0492eeebe3fc2accbfbac94ab3e93e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE