c5859918322a941fa8a34821de76a6a0528cc17bb7759e56082add386556326a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5859918322a941fa8a34821de76a6a0528cc17bb7759e56082add386556326a
Size

1.4MB
MD5

5946a4900673f351f73783c65ad90857
SHA1

6d5822e5d1994ea0aa45dc2d9f58ac69efcaaff0
SHA256

c5859918322a941fa8a34821de76a6a0528cc17bb7759e56082add386556326a
SHA512

529ddfc8f7f7dc4bbd3465074389cb153cc38dc35d83f85e5eb640a35f1644173a2f5e42e01128ae02c7fc88a19f31a80e42d9c752498bcf93d1a45ee56b679c
SSDEEP

24576:UNSB1w+IZ6/7OuNAJpQSyt7Wnp4Ah217YxwTZSrQkWzONjIO3p+mhwok88xrid:UNvncDkJMWnV2b3cxI0+mhu1id

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

c5859918322a941fa8a34821de76a6a0528cc17bb7759e56082add386556326a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 336KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ľ��
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.1MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE