Behavioral task
behavioral1
Sample
d578987ffad4a15242ddf63016fdc9d4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d578987ffad4a15242ddf63016fdc9d4.exe
Resource
win10v2004-20240226-en
General
-
Target
d578987ffad4a15242ddf63016fdc9d4
-
Size
1.2MB
-
MD5
d578987ffad4a15242ddf63016fdc9d4
-
SHA1
38ea1463d6a225eb859a741f67f486c61e7fe038
-
SHA256
9f19a425990e7ba9a5785fd52b12a73b8936de4aaea1f048ada2a691ebc3cd8b
-
SHA512
5b508377cf713089e3274a7e9d03b89288caa8a53ddd83589975ecfa0bdc0500d8c07a126924328243bb170ac613d77413cf10694e87e4a880294a7f3eb4fc0e
-
SSDEEP
24576:hGtgM90I77rhA1R2x/uKrLjThg5hBzRkusUshwkMw9:hGtHp7PhGRk/frLhUTOBUshw
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d578987ffad4a15242ddf63016fdc9d4
Files
-
d578987ffad4a15242ddf63016fdc9d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 64KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE