Behavioral task
behavioral1
Sample
c7727fe2603ac938a0284bbf26e80d2c.exe
Resource
win7-20240215-en
General
-
Target
c7727fe2603ac938a0284bbf26e80d2c
-
Size
1.2MB
-
MD5
c7727fe2603ac938a0284bbf26e80d2c
-
SHA1
419db4633938cf6bc07a24e4fe7519357368ab9d
-
SHA256
42691fdb4d9592d7ef16d99b27ec40803b66279da4aa1d464c8559bfba25a150
-
SHA512
0ab43108fef55066b6a18261a86e7fdc2fdf8b75bf1c41c5496af2b643204b53586bef9ae46c20df946325877777ada73da6390ee3d94dead247a8f3fb601f61
-
SSDEEP
24576:1phvPvAgw6nLUgraIt8NoZM9ns9ENnRt1OqRasMvY4bIFdbfS7YGY:FZB82os+t1OqT4MTGY
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7727fe2603ac938a0284bbf26e80d2c
Files
-
c7727fe2603ac938a0284bbf26e80d2c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE