Behavioral task
behavioral1
Sample
ccce2c949effac90806264b84fac2dd3.exe
Resource
win7-20240221-en
General
-
Target
ccce2c949effac90806264b84fac2dd3
-
Size
697KB
-
MD5
ccce2c949effac90806264b84fac2dd3
-
SHA1
783d7e51999d311d35cf4a2605f25caee3da1b65
-
SHA256
ee49c30a37e1be73d18b06648cfccb270d0fa12dfd3f072411fa5e92f0d77855
-
SHA512
8471a185898d2c6a9e4cc26a9ea381048144798902dbf2d1796029e14d704a93d25262d3767b1b6eeda6c974c264f486c33fc9459131c8c73f78030b73e0c4a9
-
SSDEEP
12288:OX9MrnRDSonyGr3N8iLftmUlLvy7lMjj1FyHbgZ6LhohcelrK13h0n9WPXc6ZZ/1:a2ZXyGr31sUlv1FyHbgEhohnlW7NXv1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccce2c949effac90806264b84fac2dd3
Files
-
ccce2c949effac90806264b84fac2dd3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 119KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 573KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE