78902e71fddd03a18b0193e4c8329d09cdce6db41eaa06dfa14708ee8a01dd8b

Sharing

Copy URL

Twitter E-mail

General

Target

78902e71fddd03a18b0193e4c8329d09cdce6db41eaa06dfa14708ee8a01dd8b
Size

3.0MB
MD5

967867c1ededf168225766abca556565
SHA1

9f954d34748e8748732d570420ce0255207f1822
SHA256

78902e71fddd03a18b0193e4c8329d09cdce6db41eaa06dfa14708ee8a01dd8b
SHA512

a9b7311f9eba606f8d95959352bc75c7d531d0f80ea79b2b3e6aa5efa9734631fbaed697ce9425cae93c1584fcca1044e490747b05b9530b0651a4ca206fe935
SSDEEP

98304:EDpdg8K/xn1F/SkOEjtiSrCfdbQtMtMsJlcuP:EDfMJ1F/XOE8LftQtkOuP

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs
Detects Themida, an advanced Windows software protection system.
themida

Processes:

resource yara_rule

sample themida

resource	yara_rule
sample	themida

Files

78902e71fddd03a18b0193e4c8329d09cdce6db41eaa06dfa14708ee8a01dd8b
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 267B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.taggant
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 288KB - Virtual size: 288KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 6KB - Virtual size: 11KB

.pdata Size: 15KB - Virtual size: 14KB

_RDATA Size: 512B - Virtual size: 244B

Size: 267B - Virtual size: 480B

Size: 1KB - Virtual size: 2KB

.imports Size: 1024B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.themida Size: - Virtual size: 4.3MB

.boot Size: 2.6MB - Virtual size: 2.6MB

.taggant Size: 8KB - Virtual size: 8KB

.text
Size: 288KB - Virtual size: 288KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 6KB - Virtual size: 11KB

.pdata
Size: 15KB - Virtual size: 14KB

_RDATA
Size: 512B - Virtual size: 244B

.imports
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.themida
Size: - Virtual size: 4.3MB

.boot
Size: 2.6MB - Virtual size: 2.6MB

.taggant
Size: 8KB - Virtual size: 8KB