Behavioral task
behavioral1
Sample
c5ddbcd1b66315289486bdf493e10cf1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5ddbcd1b66315289486bdf493e10cf1.exe
Resource
win10v2004-20240226-en
General
-
Target
c5ddbcd1b66315289486bdf493e10cf1
-
Size
1.3MB
-
MD5
c5ddbcd1b66315289486bdf493e10cf1
-
SHA1
c1cd0eb5b1d4088e701db7b81efb85944e67765f
-
SHA256
9d203a7a5e0708c71828a43dee228a084ea986f2b2e17a52242f28fc5a73b8b1
-
SHA512
fdd62f570ddb462c32da4ecddb43e792c26dd6d8884d0e0ab269388cf03a22ae81cc8cb20325bab01a5de76ce7c4416da2eda96d9fd08143b6da46aaa2926c15
-
SSDEEP
24576:ad6xxGf5rUG7aWLrXr3WdnhJhOZdJ01cxKHg3RMkFsfIIT8rlHcjdO0P4vb:admy5r7aWLrjAnWS1ccHg3ukyslHQdO/
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5ddbcd1b66315289486bdf493e10cf1
Files
-
c5ddbcd1b66315289486bdf493e10cf1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE