Behavioral task
behavioral1
Sample
7bafa484df6ca0e7f3990eeb9d536f975568668e3053aa8e1e60d22086da0ace.exe
Resource
win7-20240221-en
General
-
Target
7bafa484df6ca0e7f3990eeb9d536f975568668e3053aa8e1e60d22086da0ace.exe
-
Size
2.5MB
-
MD5
c9d631006202c61d834aaa715ea27c21
-
SHA1
f99c910569415767e3f3e45027e8dc7da254ebfb
-
SHA256
7bafa484df6ca0e7f3990eeb9d536f975568668e3053aa8e1e60d22086da0ace
-
SHA512
cf98b9adcae165a04c2fe8f5960d1b52d21ec99b526fb8856cb8630fa1ffbe184eadf3e15c475aadcabc0ae64da7b95863e3ee3e9be9ba69966c386c69935c32
-
SSDEEP
49152:p9amakIPeNL4A+ZtWUCBRLZN3oDWay1wWbchZGB8Tdgm0nOX80GL5NDXLXh:p9rI2NLv+ZtQBRLLomoUMMd0GLXzt
Malware Config
Signatures
-
Detects executables packed with Themida 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_Themida -
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bafa484df6ca0e7f3990eeb9d536f975568668e3053aa8e1e60d22086da0ace.exe
Files
-
7bafa484df6ca0e7f3990eeb9d536f975568668e3053aa8e1e60d22086da0ace.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 89KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 7B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ