87aaa5e033379c149fe2870d813478d080398f9db1a8bb621e6529af897103a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87aaa5e033379c149fe2870d813478d080398f9db1a8bb621e6529af897103a5
Size

1.1MB
MD5

6fedc74db6fb7f0e15696177e3456bca
SHA1

0bf2c5d5bb5c0f99fc4a6987e55377c22cf31ba6
SHA256

87aaa5e033379c149fe2870d813478d080398f9db1a8bb621e6529af897103a5
SHA512

671561dd9ff155fd1543c73ae1992b9dd25e6d09dfce9476b2eb2166a1774f7c4c61fb93913ddaae582813b3033bfd5673be6189db1d9d8e32e0ba922aad58a1
SSDEEP

24576:oFI6M03xJ39VytCNjWRWohdoCldM2BfTw1mOPj30GRhlMMsc:oOBuJVACNy9sCldMirJaoGnlME

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

87aaa5e033379c149fe2870d813478d080398f9db1a8bb621e6529af897103a5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 106KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 946KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE