Resubmissions
29-01-2024 20:08
240129-ywnxkabcfp 10General
-
Target
80c043e51341822e9ec36d1f028f88ef
-
Size
476KB
-
MD5
80c043e51341822e9ec36d1f028f88ef
-
SHA1
b2a609c61277de6848cc726610e8e50aa807dcd2
-
SHA256
1a0f9cc3e2b56ee0d51407547f8487f9a5a438ec261b61b7b3db1dfd90f169f8
-
SHA512
5c14cbf47c845b393d288bd6df906778a41275e3103a559a2e6a88f57cdba263f7e11f726689d9abfb63639b58111240f0646850c8fa7cf1bd9cb7299b52b374
-
SSDEEP
12288:aeJg3Stp4Bn+laUoW/6cOce8uhroZPXPQc:jJg3SYd+laUdOce8uV6Qc
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80c043e51341822e9ec36d1f028f88ef
Files
-
80c043e51341822e9ec36d1f028f88ef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 24KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 444KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE