Behavioral task
behavioral1
Sample
c78a8dc12d79e67cc11d572e42fb0b76.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c78a8dc12d79e67cc11d572e42fb0b76.exe
Resource
win10v2004-20240226-en
General
-
Target
c78a8dc12d79e67cc11d572e42fb0b76
-
Size
662KB
-
MD5
c78a8dc12d79e67cc11d572e42fb0b76
-
SHA1
17fec5de91f72ccccb1777c176e083bed92648e9
-
SHA256
1eb431b1f19103f6f2949afa12ff5382e680ca6e9f5c899034210b3749a2c88e
-
SHA512
344494a895abf7175027510d456b1ca2680219d8e6e490a1576d02df474d08975d9c11969d8f6b29cdfc88a39b0784ad99091edb26bddbb1f3102590e71886ca
-
SSDEEP
12288:E/UzB2KbVyI8Izy0WOECEhKBnqmq3le2BwNP87eGqsiTa60pn/lP27O5R0x:sUz9bg2zy0/pJqmq3le2Be87exa6015i
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c78a8dc12d79e67cc11d572e42fb0b76
Files
-
c78a8dc12d79e67cc11d572e42fb0b76.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 630KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE