Behavioral task
behavioral1
Sample
SiberiaProg-CH341A v1.45.exe
Resource
win10v2004-20240802-en
General
-
Target
SiberiaProg-CH341A v1.45.exe
-
Size
48.2MB
-
MD5
27fef5189022d360d92a8a0c3577e7a4
-
SHA1
5684f9907364bcc2f638b726a1f9f995c77e11e8
-
SHA256
7312dcec8eab0fc6463cee4a9ccf58c3ef82bddee2b8f1b15b5b31bb30abd8ba
-
SHA512
b8e3c58e19dea08a66695eeb5c293cb6b52793c2ed7cba78d45705f067acdf4cfb67fb79384951dbf78e3c920aeb7b843eb18acc8c7483a1c0196edfecb6c4e6
-
SSDEEP
786432:NkJN2U/4PbfrA+TYOqn8d/h74Kf2ZaYChUpbRnr7QaiNh0G4YTv:mr2L6TqIUaiNp4YL
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SiberiaProg-CH341A v1.45.exe
Files
-
SiberiaProg-CH341A v1.45.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 40.9MB - Virtual size: 40.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE