Behavioral task
behavioral1
Sample
84eca0e57a514eb87f728266d87bc5a6bb7bce85dc098c2c99dc80cf1ef7bb14.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
84eca0e57a514eb87f728266d87bc5a6bb7bce85dc098c2c99dc80cf1ef7bb14.exe
Resource
win11-20240426-en
General
-
Target
84eca0e57a514eb87f728266d87bc5a6bb7bce85dc098c2c99dc80cf1ef7bb14
-
Size
1.7MB
-
MD5
c271e03def113605779e93b51d1bfaa0
-
SHA1
bd7a89c9cfe6b3ff08372cf7bb58259eceefdf64
-
SHA256
84eca0e57a514eb87f728266d87bc5a6bb7bce85dc098c2c99dc80cf1ef7bb14
-
SHA512
c4c68998188f9f5c5dd0993c0195c24b8c071201fbb3f7defa2d09788c07007c8d652fa5f618c80e669de0427ad64df4c5535810b1b5587d1194b9a2fdcb44e4
-
SSDEEP
24576:i093/oEr8j544vEXqW+kQB0JxCZhGhPLdn0BuyVDMm0Q6rbQFWOw8gAjY5vjL6kV:iKP6j54JXqW+E8hoZ0Buoyvn6kNnNFnz
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84eca0e57a514eb87f728266d87bc5a6bb7bce85dc098c2c99dc80cf1ef7bb14
Files
-
84eca0e57a514eb87f728266d87bc5a6bb7bce85dc098c2c99dc80cf1ef7bb14.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 139KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 21KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vm_sec Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ