a693fa7edf4946b64487e302294cdaf5758fb7855f1fae2858e734262f708062 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a693fa7edf4946b64487e302294cdaf5758fb7855f1fae2858e734262f708062
Size

1.1MB
MD5

8b290d63dbd5169d58f44f0c8b935b5e
SHA1

8315008cb271e7dea3f9e64f763f9da64b561500
SHA256

a693fa7edf4946b64487e302294cdaf5758fb7855f1fae2858e734262f708062
SHA512

1c40a65af4ddd46406215959fa92edde16c648191601afd9ab80e77000644796c8df5f0a69b7ca49ad7cdd5bce07347d937aff06332acd95c214aa9f546f67c0
SSDEEP

24576:Pz+3UCdT9rEs6YtnQGWhErnZTQMttCaAnMLyk2P22qMJf:Pj0hxbnZT9rCHnIyBP2/MR

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

a693fa7edf4946b64487e302294cdaf5758fb7855f1fae2858e734262f708062
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 822KB - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE