Behavioral task
behavioral1
Sample
cc075bb05cd2f2459ab011ab91fcd5c8.exe
Resource
win7-20240221-en
General
-
Target
cc075bb05cd2f2459ab011ab91fcd5c8
-
Size
1.5MB
-
MD5
cc075bb05cd2f2459ab011ab91fcd5c8
-
SHA1
35e70f6cdbc121935eb463b34dfa7bba706baee2
-
SHA256
74507c6f7b0e36d6294920107a7cf47af0243f8bef6dd8dca6b23a0409829bee
-
SHA512
4160717b9909d9c008de9a8532667e293d4c40cb5c0554cf9a7173b66dd30f8a18174498c1699aaba1d49c58ea0768d938643c22e4ca25795a9a155002bb0c04
-
SSDEEP
24576:W7sslkKOIi2QAW3Nlg4AJOXvtzzyeIJB86pqvmNkFTBKzOmpeZfwpUk:WoslkOg3NbAJOXvpz+J10mNk8OGN
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc075bb05cd2f2459ab011ab91fcd5c8
Files
-
cc075bb05cd2f2459ab011ab91fcd5c8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.4MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE