95f6c62720f93fbbed5778446eaa2350a5a271a097bafee977c0a64f9c0fbde5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95f6c62720f93fbbed5778446eaa2350a5a271a097bafee977c0a64f9c0fbde5
Size

1.2MB
MD5

3e6f213b828d650dad781c34e9998fa0
SHA1

fe66bb4e2ac5186e841d9ccb501f700f76acdaa2
SHA256

95f6c62720f93fbbed5778446eaa2350a5a271a097bafee977c0a64f9c0fbde5
SHA512

0190a0b25ba5cf072707303c81d896f8b972216dc7223fe4ceb4d04d1fe0e8fc87b2923301c9402011a233173786a3586e0e22d2d8d0de62118ed4fa5c04b14c
SSDEEP

24576:UYHwOACjR9yXo42Jz+teUk4hSjr3UlRb7TK0lUCXU2NAgKgyiFlMfddjaqf:lzDyXo42J6tSqSjrWTKkXU2i3XikdGqf

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

95f6c62720f93fbbed5778446eaa2350a5a271a097bafee977c0a64f9c0fbde5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.2MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE