Behavioral task
behavioral1
Sample
e0cc9aab768bdeb00015b6a9e57f9a5d.exe
Resource
win7-20240215-en
General
-
Target
e0cc9aab768bdeb00015b6a9e57f9a5d
-
Size
1.4MB
-
MD5
e0cc9aab768bdeb00015b6a9e57f9a5d
-
SHA1
e0b89483b8feb8798f7aba49b8c0241ba8022a8e
-
SHA256
24d84a875f7dec2d30353246a844fcc3b5fd219cf482f6082b8ca7d7fcf4050f
-
SHA512
361369b2e60ef27fe845bb87e415532ee47afc8e5be11b898845371c60a205f67aa3de86d39c0c42973abb9513b4ecb95d58a93d049b6b1caaac2b88aaf1b56e
-
SSDEEP
24576:9WqNQM+xLXBbla47b6oHzRXqn6UYVLDCtOsZCcDHmVsUxpQxTTZ7ckMq1tttD8:nz+xNblhPzRXugFcDHc7ETCkXtD
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0cc9aab768bdeb00015b6a9e57f9a5d
Files
-
e0cc9aab768bdeb00015b6a9e57f9a5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 124KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE