Behavioral task
behavioral1
Sample
b34b29fa2d6a33ddd4130e0e1e75b0fd34c9343175f54ba24f3dbdaa6302c7e3N.exe
Resource
win7-20240708-en
General
-
Target
b34b29fa2d6a33ddd4130e0e1e75b0fd34c9343175f54ba24f3dbdaa6302c7e3N
-
Size
1.4MB
-
MD5
f8739f98aedc52328179aac710cb3040
-
SHA1
b87a885cdd1b2c74e4499f9e285d63928e5a7152
-
SHA256
b34b29fa2d6a33ddd4130e0e1e75b0fd34c9343175f54ba24f3dbdaa6302c7e3
-
SHA512
6605d3fab9eebeb0376bf0b0d73f1ae610b06668ff34ad0346d9fb8f3210839547e1600678b844794f9458ab55667ba0de4924fb2db0d832206a0d0eb877afa7
-
SSDEEP
24576:/RV9wuVZda0T8RTyojFxUljReMKZdRtxtE1HF3A5Aq3IRv07rCVuqnR:5VOuVXT05XgReLPhs3wYMGR
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b34b29fa2d6a33ddd4130e0e1e75b0fd34c9343175f54ba24f3dbdaa6302c7e3N
Files
-
b34b29fa2d6a33ddd4130e0e1e75b0fd34c9343175f54ba24f3dbdaa6302c7e3N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 315KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 435KB - Virtual size: 875KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 700KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE