Behavioral task
behavioral1
Sample
f06fb19191be092011d98dc22c7b2d5caef458df98110e56f88d4e44fa30693dN.dll
Resource
win7-20240903-en
General
-
Target
f06fb19191be092011d98dc22c7b2d5caef458df98110e56f88d4e44fa30693dN
-
Size
1.8MB
-
MD5
fce05729a0f2094720d2da2287fe3360
-
SHA1
e7dff7538e9ed06c89ca8f09985db633d9e1a28d
-
SHA256
f06fb19191be092011d98dc22c7b2d5caef458df98110e56f88d4e44fa30693d
-
SHA512
214c9f2976b447d85c379e175e5a7b60ae9365b34eef667c787c468c299a35d3a6e3b3f0e5925a9e58fb474eed5b77976161f8d81c4b1221d8299c4ad6545ced
-
SSDEEP
24576:xbnQV/nA2yWiKKsgPWku26T9jixDno8ifG0AgU4YtLPQyh54FE7bLBqa5mrBXvv:C/AyT/Aojmo830ApJPQyhkE7r+X
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f06fb19191be092011d98dc22c7b2d5caef458df98110e56f88d4e44fa30693dN
Files
-
f06fb19191be092011d98dc22c7b2d5caef458df98110e56f88d4e44fa30693dN.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 159KB - Virtual size: 11.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.3MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE