Behavioral task
behavioral1
Sample
221e24f4b004cca9a57843c3579a2051cf22fb2bfbd7d5effe840cea5f2da24f.exe
Resource
win7-20240221-en
General
-
Target
221e24f4b004cca9a57843c3579a2051cf22fb2bfbd7d5effe840cea5f2da24f
-
Size
4.7MB
-
MD5
09f88098ed69919677a55ec86c021b32
-
SHA1
a11655604a0a37155693026d9ba209792e31a6fd
-
SHA256
221e24f4b004cca9a57843c3579a2051cf22fb2bfbd7d5effe840cea5f2da24f
-
SHA512
7e8a0868b2004378a4363c123cd72a10a305e24ce147a6084db679814bc655e5e0b0036bcc93f476f697d638fdcedecdd52fec129cd859468f9d81fca1b68466
-
SSDEEP
98304:p7Opz5DyY25X9AF8sKKBJJLiuVZ7mNgGIGmVpz:pKpz5DyctFLTmN5IGmH
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 221e24f4b004cca9a57843c3579a2051cf22fb2bfbd7d5effe840cea5f2da24f
Files
-
221e24f4b004cca9a57843c3579a2051cf22fb2bfbd7d5effe840cea5f2da24f.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 77KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ