6ce8c37950a996a55098e7cf7d82945147d14a4bf01f9701d2ba8a551d61dc88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ce8c37950a996a55098e7cf7d82945147d14a4bf01f9701d2ba8a551d61dc88
Size

1.3MB
MD5

11ccacbe07f3e9a2db4dd8ba504ee1d2
SHA1

21c3ccda196b17872d05a1ed77fa5cc1bef16e3e
SHA256

6ce8c37950a996a55098e7cf7d82945147d14a4bf01f9701d2ba8a551d61dc88
SHA512

67b73dced3cdffa555d2fefe274b130464224968626f8fcf3afab17479fc4484f617d781608b41c33377d69bb4bce6eddf4a140afb252510fd34567c699c6445
SSDEEP

12288:o6acvAlJW5PmQXWQa8Q1JAQ6j0rc9WSj8Yuwmr:JacvAlJW5Wftvj6jD9WL0

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

6ce8c37950a996a55098e7cf7d82945147d14a4bf01f9701d2ba8a551d61dc88
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 16KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE