8f83f0b13b7c23402191727af720bf2bb284c5c634ec86eb239c9e9ad6c47322 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f83f0b13b7c23402191727af720bf2bb284c5c634ec86eb239c9e9ad6c47322
Size

2.0MB
MD5

26c59f52d7effe96023259830d963bb4
SHA1

9e1aca7a6538512c86c9f3d3d3f156e5edc96b7e
SHA256

8f83f0b13b7c23402191727af720bf2bb284c5c634ec86eb239c9e9ad6c47322
SHA512

459ee5589f1bcb5e0f4dea687c4aabe002d8298e1f294d0e45b4334b25899f57849797f6bd494b4bc9f506cce3b7b252e5eb768442bec86a59f3ad43fc688956
SSDEEP

49152:O0m7ZMEK48G5XXfDHxUH4ELCS3zfCLuKDP9:OkEzXP7KH4EeSjfcuKDP9

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

8f83f0b13b7c23402191727af720bf2bb284c5c634ec86eb239c9e9ad6c47322
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 17KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ifc
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.9MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE