Behavioral task
behavioral1
Sample
12af1b55e55dcd4b7cefd09944cefe10N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
12af1b55e55dcd4b7cefd09944cefe10N.dll
Resource
win10v2004-20240704-en
General
-
Target
12af1b55e55dcd4b7cefd09944cefe10N.exe
-
Size
4.8MB
-
MD5
12af1b55e55dcd4b7cefd09944cefe10
-
SHA1
5086c44e8a4321e83a18feab41983e0b9255a316
-
SHA256
5aeffe33a48240652eb3f5719bd00d245e3f4fd79106f25dcd5cd3d3e4890362
-
SHA512
d7d4919bc66b528e9ab2d77d3fb7985f60f0fc4f9327e402f79e9a7f3ec4b1449be79697ef4a5368d3fc04407ac58c10c0bcaba2336e1b32ba46ae027e684edf
-
SSDEEP
98304:bFhZC6RJEzKFLI5Xk0LnR4BcxvDFedSfCOvrQrTSfH7clZ:FATzvlDFedSfCOvrQrW/7sZ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12af1b55e55dcd4b7cefd09944cefe10N.exe
Files
-
12af1b55e55dcd4b7cefd09944cefe10N.exe.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE