Behavioral task
behavioral1
Sample
d6a74c40f5757559d6b6cafd8b79a77a.exe
Resource
win7-20240221-en
General
-
Target
d6a74c40f5757559d6b6cafd8b79a77a
-
Size
439KB
-
MD5
d6a74c40f5757559d6b6cafd8b79a77a
-
SHA1
d773763a30b66d35e751f2336209867d81a3f73d
-
SHA256
d3a5a86b43522785f64a1be74f7e2504432f6d5993cb4581f2ca94dd9a38a1c5
-
SHA512
523120cdc541405e23d5ae9bdf74aaab30ea26e8037d2fe23858c67e15fe285834cebfadccded876f8a836c464d5e69e90aa55c7de1f14aebb916c95558180e2
-
SSDEEP
6144:dxFABwhzIRaXWDw7vA2n3xrvn7xX9NnKEarPzoqUFc8iWUBw4EjblmVAXCIrh:dIBwhzIRwWydfTNnhIbhUu8tU21QAyI
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6a74c40f5757559d6b6cafd8b79a77a
Files
-
d6a74c40f5757559d6b6cafd8b79a77a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 52KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 374KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE