acc5a5c1d0ea113798e0086b2d7c232a4c5ba232311a1c1d295708e7ea26596c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acc5a5c1d0ea113798e0086b2d7c232a4c5ba232311a1c1d295708e7ea26596c
Size

694KB
MD5

02859d3cd25bf8fe5ad348de0588fa46
SHA1

db6a1779ca9abb486df233c3e15d7223207e6029
SHA256

acc5a5c1d0ea113798e0086b2d7c232a4c5ba232311a1c1d295708e7ea26596c
SHA512

7e2440c7147bbe86d2e9c1e432c3e3239378ce83fbf8f07c09f99d6ddcee18a7a80acd6edf11c0e4649222ccab56112a048004bcd00a022e63ed2d2f00b7045f
SSDEEP

12288:GgTpr0l2JGRdlPO3SSVnFv4aRr61Zpn0kBonK47nAb0JvZUrqJPKEuc/cMAzQDsw:7rA2MBOiIFDOF0kWK4zU2JPOCczWqA9

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

acc5a5c1d0ea113798e0086b2d7c232a4c5ba232311a1c1d295708e7ea26596c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 13KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 618KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE