Behavioral task
behavioral1
Sample
c28030a4a8e623427f69412a8fd5ceb3.exe
Resource
win7-20240221-en
General
-
Target
c28030a4a8e623427f69412a8fd5ceb3
-
Size
3.1MB
-
MD5
c28030a4a8e623427f69412a8fd5ceb3
-
SHA1
2b1bfb02602ca1d5d661f96abc95cf299b848530
-
SHA256
f4bb809b2c49c6106a1fda12ce05f7f2db60f2fb56f82b2f0fe9b3dd748c5f3e
-
SHA512
eafd8387c9d87a9ce4c18efcf3c4992d5bcbd69057d97c81deef03f2bd05d53005d9882a37674e511073ff24ba2aa60ddae06b7f7002230ffc309f609767ab7b
-
SSDEEP
49152:cC4McpouDoYZFn9PhD0H+TQpi0skvCduYN2aEf7h3vYoMIwc5aOt12o9Fn63kjz7:V1czEkhthD0LkJUzlQvi12o9F6Ujmih
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c28030a4a8e623427f69412a8fd5ceb3
Files
-
c28030a4a8e623427f69412a8fd5ceb3.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 322KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 38KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 13KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ