Behavioral task
behavioral1
Sample
c5eb5f482612bba46cb9f35827e3165a.exe
Resource
win7-20240221-en
General
-
Target
c5eb5f482612bba46cb9f35827e3165a
-
Size
1.0MB
-
MD5
c5eb5f482612bba46cb9f35827e3165a
-
SHA1
2ebf6361d114f3104dae12dbc1f490a513634207
-
SHA256
841e4fc4eaa0378bf6b4d5574fd30cffecd560644234e6d2b95ac4c8111c06d5
-
SHA512
4fa2d61fc36dc909e7b74b904cd43c10f3f362cfd818f6236a5a377c93cec23f0827d4b8a4e8a5e1840eff6993ffaef54ad7f3da5c2dfe68412afbf9dd7c4464
-
SSDEEP
24576:UY+GQuaxYwItKvCIg9WRi+G9tcPf2wjHQtQbQ/K2SxKyhPcRgDG3c:2GQv2w74hveX2MVQCrcRV3c
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5eb5f482612bba46cb9f35827e3165a
Files
-
c5eb5f482612bba46cb9f35827e3165a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1013KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE