38461e31543daade52ed3547620adb36ead9c2421537e4f2eefb500fdfc5596a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38461e31543daade52ed3547620adb36ead9c2421537e4f2eefb500fdfc5596a
Size

2.3MB
MD5

4b202abdb1cec04499a8a626d9568bdc
SHA1

ec1cb879056186e9eba95f2994c9502b17accc80
SHA256

38461e31543daade52ed3547620adb36ead9c2421537e4f2eefb500fdfc5596a
SHA512

7dbb9f9f64539ddbc48be04be60a27f584257aec6598c94d7bad6a7d81efc09e447829f35864e1c711d93f54236efef41ff2aebbc8875bc67be6ae509fb020b4
SSDEEP

49152:FtXvnXE1uwOlE/X1y8qtCFcPbTzoh5zNALV8rOPDJyRAgypaTkg9FA0dGscglv7m:FtvXYclEv1Ct6kbTGIV8ruJyjBAg9FAx

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

38461e31543daade52ed3547620adb36ead9c2421537e4f2eefb500fdfc5596a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 69KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 7B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 42KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ