Behavioral task
behavioral1
Sample
cba9e437ce9723abd4759a5642c56f54.exe
Resource
win7-20240221-en
General
-
Target
cba9e437ce9723abd4759a5642c56f54
-
Size
1.4MB
-
MD5
cba9e437ce9723abd4759a5642c56f54
-
SHA1
5ae8ed6510b0b5149ddedb51869a62f6dd1c45e6
-
SHA256
defdce27c2f9fea2217764427660addbec4b51d12be8f940c0e7940618e3b393
-
SHA512
bbe884e91c5709e4287e3a1081ae3a812094396f29086e20e9392a4d2db37f601fb693d0603e788fcbc1b8b9460747d032329bd044751356c7d669a1d4b2b974
-
SSDEEP
24576:xzVyJRvOAWQuE83HVeNCWVBmy9HqDaD6zl/zdAUDlkYRr+jkPgvUWet:xzVmRvPhud31eNC4t8D1zdAUhkEr+wPt
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cba9e437ce9723abd4759a5642c56f54
Files
-
cba9e437ce9723abd4759a5642c56f54.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE