8721eccb633bb1f6a13db72e565394d6d7662b29dd3f34eae04c90e30d73f48d | Triage

Sharing

General

Target

8721eccb633bb1f6a13db72e565394d6d7662b29dd3f34eae04c90e30d73f48d
Size

989KB
MD5

778c9912056a62769e9040a0f2d53dc8
SHA1

0a895da12016f8dcf4ebdbfcccc938a555a9fcd2
SHA256

8721eccb633bb1f6a13db72e565394d6d7662b29dd3f34eae04c90e30d73f48d
SHA512

97cd4e7113336e4e814864c71276735b2ceec143be290f027e2997ef181e59d466c813e1ae5b850f498579bba757b8024d81ea1eb100f941d00ec86a1d0668b5
SSDEEP

24576:nkio0PfCjS+4b8sktpy3x/Fqc8rmmpuAmWdDxTP940ums5XyLzVB0G:njJfN0a+uANdDB140umaiLzHj

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

8721eccb633bb1f6a13db72e565394d6d7662b29dd3f34eae04c90e30d73f48d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 247KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 662KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE