82da4a4da65b8fae047c3149739ddc74313ecece31be94465b84ac8f0612d715 | Triage

Sharing

General

Target

82da4a4da65b8fae047c3149739ddc74313ecece31be94465b84ac8f0612d715
Size

921KB
MD5

9fdd78f392b72b603acb0158fb1c4cd8
SHA1

ee199a4156ff5e1eb8ef19fd336f4ea592309ad3
SHA256

82da4a4da65b8fae047c3149739ddc74313ecece31be94465b84ac8f0612d715
SHA512

3cea0b92d8feeb80594f2f334e24e36911a08b0596caf3cf2bc36f314b0120832ffa60d191331b6cb2e2ac348116d39127f7a66610e6558cb60e939b3bf5e280
SSDEEP

24576:MD6YMwAfJAFF6B0rGkvRVuLhMaXVTFF3CflX70IXSLO:M+YMwOJAF02JGhtXtFFSflL0I

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

82da4a4da65b8fae047c3149739ddc74313ecece31be94465b84ac8f0612d715
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 287KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 621KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE