Behavioral task
behavioral1
Sample
d405b625ef3b8a03aebbb6281de35280N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d405b625ef3b8a03aebbb6281de35280N.exe
Resource
win10v2004-20240802-en
General
-
Target
d405b625ef3b8a03aebbb6281de35280N
-
Size
2.7MB
-
MD5
d405b625ef3b8a03aebbb6281de35280
-
SHA1
a4915dbc27d3db1cb8a346e213b5f915c9e4da4b
-
SHA256
280051893be3996a9f1f6838c6fb7bb914008f8d7f86d3fa5b3347f18da86f61
-
SHA512
6c93df2167ec0e5399bfbaa21176c755d41b902edff2c9150d92b399b681a9283ab5f00565b850eeaa40115356df57083ca6ee552440c36f32481e5769cae67a
-
SSDEEP
49152:uaLpZ1bFe4G/m5EfBj1W12uQFLDrq4b8U8LEgrmV36EyiDR45GYHP3GaB+Kn0:u8Z5G5fBjst0YU38mVKQ+5GYHeaB+40
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d405b625ef3b8a03aebbb6281de35280N
Files
-
d405b625ef3b8a03aebbb6281de35280N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 34KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ