Behavioral task
behavioral1
Sample
7734c8c0aeadfb247e15206bae8052d4574630c18f3234cce23061f71e81419cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7734c8c0aeadfb247e15206bae8052d4574630c18f3234cce23061f71e81419cN.exe
Resource
win10v2004-20240802-en
General
-
Target
7734c8c0aeadfb247e15206bae8052d4574630c18f3234cce23061f71e81419cN
-
Size
889KB
-
MD5
f8272efbe7abcdfc26fc40b6e485dc70
-
SHA1
2a9831ec7603c354b9a4ddcbbc2960a9934b33ac
-
SHA256
7734c8c0aeadfb247e15206bae8052d4574630c18f3234cce23061f71e81419c
-
SHA512
385fa30295a92765e7926be63c5eb8ec0ac80c062f85accc4d43a61588120f71e979c4347c7fc3d56602f82cc2f513eb068b37647f7564cb48073eecba498d7c
-
SSDEEP
12288:FwaxPGnUzD7cxEqlhwCnT0tZvUO7NSrli1uBId/aTL/xG/lF3kY5AWkAJj3uCwGL:Sah57cSqlFnT0uZi4SMglF08njVQG
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7734c8c0aeadfb247e15206bae8052d4574630c18f3234cce23061f71e81419cN
Files
-
7734c8c0aeadfb247e15206bae8052d4574630c18f3234cce23061f71e81419cN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 72KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 812KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE