Behavioral task
behavioral1
Sample
cd0b99fae91b295a5f1e426f0c735f56.exe
Resource
win7-20240221-en
General
-
Target
cd0b99fae91b295a5f1e426f0c735f56
-
Size
1.5MB
-
MD5
cd0b99fae91b295a5f1e426f0c735f56
-
SHA1
697d6859854e2a56e6c769802afb4730dc0fd15d
-
SHA256
24b50bbdcfef10d157f7b3a86adfc1bcb37c41783187243380dae7a1bc4176d7
-
SHA512
b63a632286f38f6ed9eafaf862e2d53335513a4bd7d8c08637d00162be8dc47f0cadaf5f4609c6361b6335a000474f913a3afdc3f0102332faad4a423881bed1
-
SSDEEP
24576:L3wpLmzL6cmbyCk+D79xhDQA7f6QGPvqHu+B+QjQxv/4TRno8GGuMaJkFWhLV6dw:iLOmkKxhDQAaIu+gl/4tno8GGuMaJkA5
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd0b99fae91b295a5f1e426f0c735f56
Files
-
cd0b99fae91b295a5f1e426f0c735f56.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE