Behavioral task
behavioral1
Sample
bc050f6d44317153371b3383effa8229b2fb4b781d35046e56d1ef3497a21ad8.exe
Resource
win7-20240705-en
General
-
Target
bc050f6d44317153371b3383effa8229b2fb4b781d35046e56d1ef3497a21ad8
-
Size
6.0MB
-
MD5
df746a4ec8c9b15c5b071398ce51377b
-
SHA1
6c85968b149947f1237f7544480b3f69ed03ba26
-
SHA256
bc050f6d44317153371b3383effa8229b2fb4b781d35046e56d1ef3497a21ad8
-
SHA512
adf87ec40a576e368edc1078f0b8f6cc9346850373aaf8aa830d3c202a8c4e119db77f89ba1319330b056e2b196b09425c8edaa6281c6b3f474be9399ca5de17
-
SSDEEP
98304:n7OFqrjWXsKkeiWQW2myE3jQ73jnSRRrXfaXHi/E9ISIMaftx/aRkc5WGxwuy:7rj+keLZ2pET7R7faYtf7/Rc5zwuy
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc050f6d44317153371b3383effa8229b2fb4b781d35046e56d1ef3497a21ad8
Files
-
bc050f6d44317153371b3383effa8229b2fb4b781d35046e56d1ef3497a21ad8.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 21KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ