Behavioral task
behavioral1
Sample
2f3fb98cde0255f83e6c5f3e9676868fe17f969a7f6103fe5db3a791ff5325a0.exe
Resource
win7-20240903-en
General
-
Target
2f3fb98cde0255f83e6c5f3e9676868fe17f969a7f6103fe5db3a791ff5325a0.exe
-
Size
2.8MB
-
MD5
0c5dad3e8eb28ced1fa7dcff2099c889
-
SHA1
69af5491ceb2b2889e59ddf1fea5b445c0fe1dcb
-
SHA256
2f3fb98cde0255f83e6c5f3e9676868fe17f969a7f6103fe5db3a791ff5325a0
-
SHA512
359ea9db76eaba98ba520df8ebf973f3ef4dd6d0e3711c1d1ebf057e5c0f2650f2c6af1a9a5a3a55efa6d400e654f30a79df86f74042788e0748817f34d6eb8d
-
SSDEEP
49152:95VWQ4h1EtbHYF4PGVHX9gWX9cPpmnUr+Syx+UQ498iEjEv/6p3BVR51:9FjtbO4PCtDKpohbx+b4aHA/QHr1
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f3fb98cde0255f83e6c5f3e9676868fe17f969a7f6103fe5db3a791ff5325a0.exe
Files
-
2f3fb98cde0255f83e6c5f3e9676868fe17f969a7f6103fe5db3a791ff5325a0.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 121KB - Virtual size: 36.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ