Behavioral task
behavioral1
Sample
5527d9ff6748ba97dce147f6d1ea12cc259d7418eb62c2843eccfe54e7194176.exe
Resource
win7-20240705-en
General
-
Target
5527d9ff6748ba97dce147f6d1ea12cc259d7418eb62c2843eccfe54e7194176
-
Size
4.1MB
-
MD5
086bf8812caf3f5bb2b7921401ec5d4a
-
SHA1
f7580e706420eb7171d636e11de2732a871d5ca8
-
SHA256
5527d9ff6748ba97dce147f6d1ea12cc259d7418eb62c2843eccfe54e7194176
-
SHA512
80ffdc1d2b80a137b19cce5ab21707b92a63f7b43287b3d63d9d44b78d40b1ec174c150f2028ff5966e2e4a70b094e03ed2e5dd4c0e9e766fc6c9e6e0b0a2a27
-
SSDEEP
98304:+AQYtiW+NcuWt2A7f/YwjD96E9jfOCt7B7x7a5s3GYUp:+QM1Wt2Kf/YmD9x7B7xnGYg
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5527d9ff6748ba97dce147f6d1ea12cc259d7418eb62c2843eccfe54e7194176
Files
-
5527d9ff6748ba97dce147f6d1ea12cc259d7418eb62c2843eccfe54e7194176.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.2MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ