Behavioral task
behavioral1
Sample
4fc5674dcfd3d47ff9382c03409e7614b1d203a7b3f1bbaa8329f0d5a7d05bf9.exe
Resource
win7-20240611-en
General
-
Target
4fc5674dcfd3d47ff9382c03409e7614b1d203a7b3f1bbaa8329f0d5a7d05bf9
-
Size
14.8MB
-
MD5
905d90b70149da5ea972ea791b066c1c
-
SHA1
f855b1626adfc08e3d36e463376208c526b5c0cb
-
SHA256
4fc5674dcfd3d47ff9382c03409e7614b1d203a7b3f1bbaa8329f0d5a7d05bf9
-
SHA512
bd98fc81717971573cfec06466c00d84a8ccd2b5b85cb66e9e58a6aa49aeab4ab963c46a311b82e9729e707ff6eeb260e7a69d39ee6dc754784074c6b6e1f52a
-
SSDEEP
196608:eGfsk7gav9jnIJ/ykOFZBOgIYwaqkvsysSUSSSCwZpOcdi5w0/t0i1GNf/0QJf3H:BN7gNJiFKgIxCsdFx/w051qnVJFZ7dd3
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fc5674dcfd3d47ff9382c03409e7614b1d203a7b3f1bbaa8329f0d5a7d05bf9
Files
-
4fc5674dcfd3d47ff9382c03409e7614b1d203a7b3f1bbaa8329f0d5a7d05bf9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 503KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 8.2MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 50KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ