SDDownloadFile
Behavioral task
behavioral1
Sample
dcd528004d5dd040992fb035930c6248624f282169370ea7ea11dbf5379f0bbf.dll
Resource
win7-20240221-en
General
-
Target
dcd528004d5dd040992fb035930c6248624f282169370ea7ea11dbf5379f0bbf
-
Size
4.5MB
-
MD5
15a678d43ad27efec643fbbce443089f
-
SHA1
b94b3ba47ac555951e4660655d43c1a5945564a3
-
SHA256
dcd528004d5dd040992fb035930c6248624f282169370ea7ea11dbf5379f0bbf
-
SHA512
02f844db51eea382778de1ec36c6c1fad3a52f5868869db688abd3c202722bd6dc5ef2bfb8a10548897bb3e7d84d020c2c4140dbba19b92aadff89dffbff667b
-
SSDEEP
98304:gzCHMm3YZCT1I4qnjqcYkez8/oGayQy12XLTqnldwfLm0zofBVs6adni:FPYZdjqtR8QFybWildwfLvzua/i
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcd528004d5dd040992fb035930c6248624f282169370ea7ea11dbf5379f0bbf
Files
-
dcd528004d5dd040992fb035930c6248624f282169370ea7ea11dbf5379f0bbf.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 31KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 9KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 189KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ