Behavioral task
behavioral1
Sample
b1831d15e4e3b7dc6481d57bd4e471ccc36b22064f4e364f7eb48eec8ee57bbd.exe
Resource
win7-20240221-en
General
-
Target
b1831d15e4e3b7dc6481d57bd4e471ccc36b22064f4e364f7eb48eec8ee57bbd
-
Size
2.6MB
-
MD5
44acb085e99223cb62ccd07fb78b9636
-
SHA1
31ff595aea3e91318f67c07d8040bc83f91d6baa
-
SHA256
b1831d15e4e3b7dc6481d57bd4e471ccc36b22064f4e364f7eb48eec8ee57bbd
-
SHA512
2eee8b8e9234f6164523042b3a86da37d3a39941bc99e35e74ed9117c7910e4b9c7f96d33214a514914445f52619a6187f60cb9fe98632472bc0f04d87c06af7
-
SSDEEP
49152:WkTWAG/J3zCokDCfoybVBZEE6dsllkwu+Nqlw2d+MunhR2H7X:BTWAg3vbqHl+cu2AMunhMH7X
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1831d15e4e3b7dc6481d57bd4e471ccc36b22064f4e364f7eb48eec8ee57bbd
Files
-
b1831d15e4e3b7dc6481d57bd4e471ccc36b22064f4e364f7eb48eec8ee57bbd.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 931KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 117KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ