Setup[.]exe | Triage™

General

Target
Setup.exe
Size 6.1MB
Sample221116-vvtvmscb69
SHA256 867acada5e2a7723085e439a6d89226e69af216f719d6001db13bbe04e95f54e
MD5 506be70852e70cea556cb51720fb594f
SHA1 5531ffa016232f264a02c65a74f88effc825ca91
SHA512 4a8e47a86c49e4a8c22cbaa673922b065ba37d50d903961f12ecb1275eafc6df2d882aa4ef9565a9f9bd21879461c5357891f3382ba50ba332c3abffb1daae3b
SSDEEP 196608:5mwS70AIDe/o0qd8OmkRD3A4a0uXx4mgj:5m0AUsVqd/vRD3A0uB
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

SHA256 867acada5e2a7723085e439a6d89226e69af216f719d6001db13bbe04e95f54e
MD5 506be70852e70cea556cb51720fb594f
SHA1 5531ffa016232f264a02c65a74f88effc825ca91
SHA512 4a8e47a86c49e4a8c22cbaa673922b065ba37d50d903961f12ecb1275eafc6df2d882aa4ef9565a9f9bd21879461c5357891f3382ba50ba332c3abffb1daae3b
SSDEEP 196608:5mwS70AIDe/o0qd8OmkRD3A4a0uXx4mgj:5m0AUsVqd/vRD3A0uB
MD5 SHA1 SHA512 SSDEEP

windows x64

Themida packer

Detects Themida, an advanced Windows software protection system.

themida

Minor OS version

Major OS version

Entry point

10035288

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths