c8564d25416097b815b6f05d96696c196360c2a803abf051374f60ac4622e81c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8564d25416097b815b6f05d96696c196360c2a803abf051374f60ac4622e81c
Size

1.4MB
MD5

0d1216c86d6c4bd45a7e45aa386a901b
SHA1

70bd75382ff6fdaaf1a98efa37d41a4777177afc
SHA256

c8564d25416097b815b6f05d96696c196360c2a803abf051374f60ac4622e81c
SHA512

78d0774af412e837f372fe52350a47e9bab55fafd3d19f23ad30300e8fa49c4e75c16d598b9db4fb3172c20ea610251add69e732ba32369123ab07c6274dd7fa
SSDEEP

24576:x1mPWajKQBFgLgcQt2sJyHGSeqnr/8apa1RymfEj8xcFWcwUnVvpLjD3D1f:qljK62Hskznr/8AdIcF8UTLfF

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

c8564d25416097b815b6f05d96696c196360c2a803abf051374f60ac4622e81c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 738KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 715KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE