a5cc1550e1457135d6459b6ca51915d28ae1a8f66d1c1742b90c137000f66c7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5cc1550e1457135d6459b6ca51915d28ae1a8f66d1c1742b90c137000f66c7e
Size

3.0MB
MD5

83d9dbb1ead152f9f0d0b39e3fc1368a
SHA1

4a5566d1bde83ae9b65fa1c01b1c13f44d9bcd01
SHA256

a5cc1550e1457135d6459b6ca51915d28ae1a8f66d1c1742b90c137000f66c7e
SHA512

2202124e1b5f437b18543373e88e2f015a94e741ed44c37157a1377b55df9456cf35f361ef5939a06105ef5a7f75b8e1bfea0eed88ec9b47e3e886a673d0588d
SSDEEP

49152:qL4FVzQQDcHpFhmdVvlOxn2Db7m/t5TmD6wVXQbTaLjk4oPDwjUvdo1yR4+B9+sN:myVcQDcHNW3Ow/AnTmeWgbTaLjk4oPka

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

a5cc1550e1457135d6459b6ca51915d28ae1a8f66d1c1742b90c137000f66c7e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 449KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 640KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE