7dac01b2ac7ade6f6040d9e4fbc5dce13fd3a894539ab49292fa6c34f37deffc | Triage

Sharing

General

Target

7dac01b2ac7ade6f6040d9e4fbc5dce13fd3a894539ab49292fa6c34f37deffc
Size

1.2MB
MD5

0671e7edcf762a7e79b6c3dc75fb600b
SHA1

ca994f4101edbec3dd84251cb878298d05579ce1
SHA256

7dac01b2ac7ade6f6040d9e4fbc5dce13fd3a894539ab49292fa6c34f37deffc
SHA512

e9826fb6ab81330fb7e56d7b022de6ee4b01810d3a631ab97ead98ec1b9def947f5c5c28915e44e410392b185880e161e1982a37a4a475324f6c3575e02d22ee
SSDEEP

24576:PMIfEJBN7PBYCbyiVtWlHwpyUBHXaQ98McgD7/vIeLl+X8:NYfLyiVtmtQ9J7QQ7

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

7dac01b2ac7ade6f6040d9e4fbc5dce13fd3a894539ab49292fa6c34f37deffc
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 294KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 826KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE