Behavioral task
behavioral1
Sample
cd76b276e92b160d07bf991e5bb6721e.exe
Resource
win7-20240221-en
General
-
Target
cd76b276e92b160d07bf991e5bb6721e
-
Size
1.2MB
-
MD5
cd76b276e92b160d07bf991e5bb6721e
-
SHA1
011090f6c6a7139b269444bd8589241f01ddb262
-
SHA256
d0a65d3793913fa6027e313b933d1fc37145760ab9fbe44bc723d889e3bcca36
-
SHA512
7530c55ad1c50c8ef2a5f702dbd837e816b3c04a49979c4e603233dfd196cced8f1171d0ccbca0d8b7c4d059d19c5e4e5fd6ab2b8c67b6892145f0af7044c9ce
-
SSDEEP
24576:kUygl0NdK/pFLcNkObKMnoVKt7f1sozIFhDp+rvil9VQSIsaIaoxOu:k804/U3BnoVKtxtMEk9BI6
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd76b276e92b160d07bf991e5bb6721e
Files
-
cd76b276e92b160d07bf991e5bb6721e.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 31KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE