Behavioral task
behavioral1
Sample
7b93adce5328a71254366dd48bff2732ba1b94355fa9c67d5cc19e52bf402531.exe
Resource
win7-20240729-en
General
-
Target
7b93adce5328a71254366dd48bff2732ba1b94355fa9c67d5cc19e52bf402531
-
Size
4.0MB
-
MD5
0df9e8a0d26815d570a5dcbf8000c1d7
-
SHA1
f1d335b68a62956e3a52bdf06bfd95aea0d753cd
-
SHA256
7b93adce5328a71254366dd48bff2732ba1b94355fa9c67d5cc19e52bf402531
-
SHA512
45f632026e7b604a48f9d7bd44ed6b7fdbbb282b908a549e375c324d790a1cb2e9b2c3e347f9c403653d317df02601649b36c528ee53b506a218a5ba6a1f2b92
-
SSDEEP
98304:Xkif0Z2yBhcQYdF1V3YbDIGJ+13HN1T6yTJKQ1QfAQ5r:0isZ2yB2xdFb3Y3It9N1TV9G
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b93adce5328a71254366dd48bff2732ba1b94355fa9c67d5cc19e52bf402531
Files
-
7b93adce5328a71254366dd48bff2732ba1b94355fa9c67d5cc19e52bf402531.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 804KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 14B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 241KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ