1571b2ee13c7552f19b2fffc1c3f7dc63dffa8652d0cfa32136852629763018d

Sharing

Copy URL Twitter E-mail

General

Target
1571b2ee13c7552f19b2fffc1c3f7dc63dffa8652d0cfa32136852629763018d
Size 8.7MB
Sample221206-dbhvlacc4y
SHA256 1571b2ee13c7552f19b2fffc1c3f7dc63dffa8652d0cfa32136852629763018d
MD5 26b47b54536e9c45a5d8e9f9141b9859
SHA1 b2f7888d7cad8cdf8ec088beed2016aa25543439
SHA512 5fcb436b7d154fda8179ce820304ccd9ccbdb9097c000b0e8f4d71eb1e581d4363b12ca659445dca788683c5215e6ea2714bfed00cd48f8911012e9feaf04a06
SSDEEP 196608:XCgxwmPpoCtterxviicZWmIpUfI6UQHRYajrUYkg:X3xdNtte9viiQWnpUfIDQHRYaXUYkg
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

File Explorer

1571b2ee13c7552f19b2fffc1c3f7dc63dffa8652d0cfa32136852629763018d

.exe 8.7MB

1571b2ee13c7552f19b2fffc1c3f7dc63dffa8652d0cfa32136852629763018d

SHA256 1571b2ee13c7552f19b2fffc1c3f7dc63dffa8652d0cfa32136852629763018d
MD5 26b47b54536e9c45a5d8e9f9141b9859
SHA1 b2f7888d7cad8cdf8ec088beed2016aa25543439
SHA512 5fcb436b7d154fda8179ce820304ccd9ccbdb9097c000b0e8f4d71eb1e581d4363b12ca659445dca788683c5215e6ea2714bfed00cd48f8911012e9feaf04a06
SSDEEP 196608:XCgxwmPpoCtterxviicZWmIpUfI6UQHRYajrUYkg:X3xdNtte9viiQWnpUfIDQHRYaXUYkg
MD5 SHA1 SHA512 SSDEEP

windows x86

Themida packer

Detects Themida, an advanced Windows software protection system.

themida

Minor OS version

Major OS version

Entry point

11346536

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

335KB

Virtual Size

629KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

30KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

6.1MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.themida

Size

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ