Behavioral task
behavioral1
Sample
6d29493872c09e8785aeb43b1acd7851adf51be72d181c3229a43aa8a54d29d4.exe
Resource
win7-20240903-en
General
-
Target
6d29493872c09e8785aeb43b1acd7851adf51be72d181c3229a43aa8a54d29d4
-
Size
9.9MB
-
MD5
672360efb2bbeca78775b3dacca059d2
-
SHA1
d393e9173b6caf09756c02e6221c3e70b15daa6d
-
SHA256
6d29493872c09e8785aeb43b1acd7851adf51be72d181c3229a43aa8a54d29d4
-
SHA512
2c201e387ba13404664bd5d74ca334334a31fe805ea28d2873427a2d74cef1b23e60887722b67db1ff2384f80bf1ff823af9b2e0ead6b8d257fc42435e7099db
-
SSDEEP
196608:BaoC1jcBtIC3uIJJRN2ER1+CRjmDu9iZXbY0GPgNMciXH5s55p8vn:Bao4atIC++uOjmKGXbY0GPwiJsn8vn
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d29493872c09e8785aeb43b1acd7851adf51be72d181c3229a43aa8a54d29d4
Files
-
6d29493872c09e8785aeb43b1acd7851adf51be72d181c3229a43aa8a54d29d4.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 471KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 452KB - Virtual size: 594KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ