b60d9be3a39ccdcb122ae33c4c851da4157a654f36dc8ac5c3a0b6b2fe367369 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b60d9be3a39ccdcb122ae33c4c851da4157a654f36dc8ac5c3a0b6b2fe367369
Size

1.0MB
MD5

92c313673da68549942cf34305352e81
SHA1

d02f7a142037771b7cde82488aa881728c8b2fe4
SHA256

b60d9be3a39ccdcb122ae33c4c851da4157a654f36dc8ac5c3a0b6b2fe367369
SHA512

8b244065b7819ccec26172575c092a99ec369d1e4e5d653273ec7e9abb62ffb8bf66ecfba66ef4f1235c49ed23b4575d05683593df842a2143c4dca54a0a7d35
SSDEEP

24576:Xs6mkB37Yi7rPt6k++DyeVpFRVeNDtOexd8P:8Zkxp9+2yeVlVoYeUP

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

b60d9be3a39ccdcb122ae33c4c851da4157a654f36dc8ac5c3a0b6b2fe367369
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 294KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 707KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE