file | Triage

Sharing

General

Target

file
Size

1.8MB
MD5

dbfd0d5909dc2c37b843efc936213442
SHA1

c8bf89746834c9d084b09a14583df5b155af3897
SHA256

1ef16fbc99c45f62cdac966a91e7d382c0297f9ad24beb6ece496bda8246c88e
SHA512

850cdd5d5bd415c0279614a621c9757611a556670bef66dd0f43eeb6dafbb32c7bfffc40dab4b1685f8df1fd2960a3de405f45695995b5559eba42fc7ba1396e
SSDEEP

24576:E1wUKQ25nAtrAAQ1C3y7n9WkUS/yNVipfqOgImk/zbINfifmZpQw4utdZ:AwU1rc179KViNqO6krbI4wpQzu

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

file
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.themida
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE