Behavioral task
behavioral1
Sample
def706463545d7e16aa4a10449854f28bd979780cd227affd5c0c2ad52ae8026.exe
Resource
win7-20240708-en
General
-
Target
def706463545d7e16aa4a10449854f28bd979780cd227affd5c0c2ad52ae8026.exe
-
Size
6.0MB
-
MD5
641443f984c1754a4d606b248b334577
-
SHA1
b618cd68aeb6ac78600f312c70ee484d6931559c
-
SHA256
def706463545d7e16aa4a10449854f28bd979780cd227affd5c0c2ad52ae8026
-
SHA512
4d08b9d4aa9269446d8f7efcb7182b662745754dad0e9a89b184bc9b6a1bcfda416e3944618134f11b0f052619f98d89f52a5ae675b6c99c77dd697d6d778a1a
-
SSDEEP
98304:tLYyArRU+pKIYF3Wsh3zaVzMI5VAIU4hss+EaNJ5vuaPEWCNSbTwbCH:tJArvpK5eVIAu4EtvLEWnbTwe
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource def706463545d7e16aa4a10449854f28bd979780cd227affd5c0c2ad52ae8026.exe
Files
-
def706463545d7e16aa4a10449854f28bd979780cd227affd5c0c2ad52ae8026.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 158KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 54KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 517KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 406KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 7.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
;M���u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE