Behavioral task
behavioral1
Sample
c39803757cc54dd49385d8915bf57f5ef6b3d5cc5c5a35032fa4687ec78ba670.exe
Resource
win7-20240903-en
General
-
Target
c39803757cc54dd49385d8915bf57f5ef6b3d5cc5c5a35032fa4687ec78ba670
-
Size
15.8MB
-
MD5
3b519ae6d49d5d828e95edcd30d36814
-
SHA1
0245f95769f3c755a113e354c8def069d21908e9
-
SHA256
c39803757cc54dd49385d8915bf57f5ef6b3d5cc5c5a35032fa4687ec78ba670
-
SHA512
67b929f30544adb3cabc755ca6b0355c04d5667d115beb9e0a936dce9923175f07cd41024ab3bd81112f3a72ebdda490bddd440e23467ab56ca8b6af5d9c8a3f
-
SSDEEP
393216:DFvvywaAa6gS1tydoE05crwzwL/OlZNT/YWOwPzyy1ZurRb2Fpl:BvvywaAa6nN95crw0LyZNJOUzyyX82l
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c39803757cc54dd49385d8915bf57f5ef6b3d5cc5c5a35032fa4687ec78ba670
Files
-
c39803757cc54dd49385d8915bf57f5ef6b3d5cc5c5a35032fa4687ec78ba670.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.2MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 11.8MB - Virtual size: 11.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 24KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 187KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ