Start
Behavioral task
behavioral1
Sample
7b4c1158fb8f21a498cf35fe3ee23823d0f636dec8a9bc0dffc9180c989df85d.exe
Resource
win10v2004-20240226-en
General
-
Target
7b4c1158fb8f21a498cf35fe3ee23823d0f636dec8a9bc0dffc9180c989df85d
-
Size
3.1MB
-
MD5
85c115728523c204533f67efabf3d532
-
SHA1
946399d37a2b70593e3db90cf2548259e1cc3be8
-
SHA256
7b4c1158fb8f21a498cf35fe3ee23823d0f636dec8a9bc0dffc9180c989df85d
-
SHA512
869f1019d99c208cc38ac8123362e632cfcb42c01475be5090383103c6be15c107f354697cbde1529669bf5e9d5e546aa36f209eff66acc57f3f397e9f406d2b
-
SSDEEP
98304:MykUl693+3sH/3iTdFq1rGa+0i/KDe9t8:Mykx3+3sH/o21ia+jF8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b4c1158fb8f21a498cf35fe3ee23823d0f636dec8a9bc0dffc9180c989df85d
Files
-
7b4c1158fb8f21a498cf35fe3ee23823d0f636dec8a9bc0dffc9180c989df85d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 526KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 66KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 22KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ