Behavioral task
behavioral1
Sample
1912-73-0x0000000000920000-0x000000000100C000-memory.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1912-73-0x0000000000920000-0x000000000100C000-memory.exe
Resource
win10v2004-20240226-en
General
-
Target
1912-73-0x0000000000920000-0x000000000100C000-memory.dmp
-
Size
6.9MB
-
MD5
9dc822015f1a97529cd9ff68165e57a8
-
SHA1
9ad0ed4174ac89e022b29559a6e996e4fa8ceecd
-
SHA256
a991bccee2caf4039b6a427bd21a8063690ab5755e35aeaacb20c7b506d00c20
-
SHA512
0ae9e40475a28f6f749b25c9e2798a8ff752438361a63600127e1a81db08d3373517f5d4ddf4ac2a521bf5a9d48ee2dc15cd74e4b72cdc549f9d7b6d681a5ff2
-
SSDEEP
98304:0JQWcxeR50B38SWAYtU5H4t3lgxQoC5IvozIcHuAfmGV5y1:fNSpwQowSOJ2aK
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1912-73-0x0000000000920000-0x000000000100C000-memory.dmp
Files
-
1912-73-0x0000000000920000-0x000000000100C000-memory.dmp.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ