Behavioral task
behavioral1
Sample
715d56c29d27b4c88383751b710653c6.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
715d56c29d27b4c88383751b710653c6.exe
Resource
win10v2004-20240709-en
General
-
Target
715d56c29d27b4c88383751b710653c6.bin
-
Size
1.1MB
-
MD5
715d56c29d27b4c88383751b710653c6
-
SHA1
7c4dbc5bf0f2071cafa059e65e009051d65a647c
-
SHA256
93d33b85538a36c79e0c6910c42b6ff499221320742e4ffd9c245731ed4126b4
-
SHA512
dab93758e9a74a64d51a27874417fc5c202b03caa4a83edcbe3bae91b0bbddd7b8d0b80b4b6c271244cd400f2851d6ee927282296899fd0a5a2f7e5cb794c237
-
SSDEEP
24576:YVIquRk310C+ajIQKw3CNYzeDdWUh/xTm54H4Dq40O+Fmf:YVNunC+OXxSNldWe/BmA47+Mf
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 715d56c29d27b4c88383751b710653c6.bin
Files
-
715d56c29d27b4c88383751b710653c6.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE