Behavioral task
behavioral1
Sample
7cba976f2121e98ba57fbcff02eea07e3b6d113c717d32a4a913cf2cc81e7ef3.exe
Resource
win7-20240903-en
General
-
Target
7cba976f2121e98ba57fbcff02eea07e3b6d113c717d32a4a913cf2cc81e7ef3
-
Size
3.6MB
-
MD5
7008cd24b89b995e7ddfdb25b0b71211
-
SHA1
d5630e4102bd5c228f02c81db478850342b2a19a
-
SHA256
7cba976f2121e98ba57fbcff02eea07e3b6d113c717d32a4a913cf2cc81e7ef3
-
SHA512
49a249c36e3b75dd6e0bae7986438c35db5d4f131661d72fab6b54f0b30b2b62dff3ccd48e0d3d69d6092f50be0f7e1c90c93bcbd6ecb2cfbdd98a6fc01449ff
-
SSDEEP
98304:y/UwoQpBAdUKRH0GtZXlInN3JHEFxqxlIWiKe/s9aXU3q0W9qnVXiP8:yVoQpKdUKRrlIN2Tq7IWbIZU3U9YVs8
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cba976f2121e98ba57fbcff02eea07e3b6d113c717d32a4a913cf2cc81e7ef3
Files
-
7cba976f2121e98ba57fbcff02eea07e3b6d113c717d32a4a913cf2cc81e7ef3.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 429KB - Virtual size: 790KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 92KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voltbl Size: 512B - Virtual size: 146B
Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 41KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ