Behavioral task
behavioral1
Sample
c1177b43ff92f969f08b23d835e79526.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1177b43ff92f969f08b23d835e79526.exe
Resource
win10v2004-20240226-en
General
-
Target
c1177b43ff92f969f08b23d835e79526
-
Size
1.3MB
-
MD5
c1177b43ff92f969f08b23d835e79526
-
SHA1
16afb127bca9cbc8a574c4a64c76c5b8ac23830d
-
SHA256
6afb873606ddeb3297a581b904bbe4f65baaee812da6d76a383584d5420f1072
-
SHA512
36c49fa46aae554b339f9da106029812120abe2e369acfe8b51bcbdb1e0c9e08a31c885b2c41e70e1de4483f00624d7cacd6430c12ee2f01d1e891100cad0b17
-
SSDEEP
24576:A+mS2FYYLkM5Mr9i/eqlGXF2ai+Faf5R31MZMH5hFBYZGk:lK509U6jFa/leMH59Fk
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1177b43ff92f969f08b23d835e79526
Files
-
c1177b43ff92f969f08b23d835e79526.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE