e9cc775644d93969580d604c602eb5df27eeddd42c7825111468e3d09ebbe0de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9cc775644d93969580d604c602eb5df27eeddd42c7825111468e3d09ebbe0de
Size

1.4MB
MD5

1d9294909222bf1abbee67683710c197
SHA1

070d46fa6c4af7a4d65e7ec93d56428df5442711
SHA256

e9cc775644d93969580d604c602eb5df27eeddd42c7825111468e3d09ebbe0de
SHA512

bbbf90eb6979a59dc9da54246b3ab98e71d63c6149f6e434da03b75764fb94774978fec747d08bde1c9b205f33477cca509efd248a04be7e0319542a400a8939
SSDEEP

24576:gYOfTyOvSRQErRgMJSFcNhHm6QjKGoIabcfjBMmnF:gYOfT0bhJSaVBULu+F

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

e9cc775644d93969580d604c602eb5df27eeddd42c7825111468e3d09ebbe0de
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 575KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE