cccfcbff2876a6984890eb006da0bd3126f29cc798f9ae779b64cbc9ae1a571e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cccfcbff2876a6984890eb006da0bd3126f29cc798f9ae779b64cbc9ae1a571e
Size

849KB
MD5

74fddc4fd35b50dadfd8c93f41b34c0c
SHA1

37ea270c17bca3e1eec34ce85c1b1313da3afbf1
SHA256

cccfcbff2876a6984890eb006da0bd3126f29cc798f9ae779b64cbc9ae1a571e
SHA512

cb5b119f6a0066d184b71d10acf232ad1ca52bfb9db4c5d7ae157a3500a3cb9134221985a6d13865f25e580a5f02160923c4b2320ffc0dfaa19da582b19bd809
SSDEEP

12288:uSb2UiAa7VHmSc8lnINLMcq2Axakrhsn6KmeWNItJuLJhbtTeekS4IVmZV1y56+C:1bWjNlngv+/hsd+vLJdtTUWB

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

cccfcbff2876a6984890eb006da0bd3126f29cc798f9ae779b64cbc9ae1a571e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 205KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 627KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE