Behavioral task
behavioral1
Sample
c190bcbec58664b7d4aeb5ef9f20b2914e01edf4f5e456e6bc36ffbc9897730f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c190bcbec58664b7d4aeb5ef9f20b2914e01edf4f5e456e6bc36ffbc9897730f.exe
Resource
win10v2004-20240802-en
General
-
Target
c190bcbec58664b7d4aeb5ef9f20b2914e01edf4f5e456e6bc36ffbc9897730f.exe
-
Size
1.3MB
-
MD5
49024bcecd06b5a37ea1a35d247fc8ef
-
SHA1
9406b9294d548bd47f790db185b03e1412aac7a1
-
SHA256
c190bcbec58664b7d4aeb5ef9f20b2914e01edf4f5e456e6bc36ffbc9897730f
-
SHA512
06615e0cbdd01bcb3d4836ad9762eaf3a8a6310631b41ba9f9303f875ff5d9b4fd7a9cf9e4af2df5aa4d962d2b3825ac087bebc2f4c89b03062ffc653710185f
-
SSDEEP
24576:3FajEqXIhavuS0c1hYywv4XVz+FlMU1boML7eiURR:3Fag4Vvd0c7YZYEXvLqiaR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c190bcbec58664b7d4aeb5ef9f20b2914e01edf4f5e456e6bc36ffbc9897730f.exe
Files
-
c190bcbec58664b7d4aeb5ef9f20b2914e01edf4f5e456e6bc36ffbc9897730f.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 55KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 14KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 33B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 884KB - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ