57ac087c275db90a0fee730b7fa59afc5efd5988cab0e7de4e081a0044c78b7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57ac087c275db90a0fee730b7fa59afc5efd5988cab0e7de4e081a0044c78b7e
Size

1.1MB
MD5

774471832b3887d4350bcf142d5f87d8
SHA1

3b35ffbf62b973e0d009de05518fa87b11ec7bcf
SHA256

57ac087c275db90a0fee730b7fa59afc5efd5988cab0e7de4e081a0044c78b7e
SHA512

6e0bc9348fbe380d42957cc5a57f6145000d5ada3d6a2f3fa5d7ef00ec27a6c01f58a778cf152769c40465ac22ed0a5b614d117d23e9dd0194ae2fda4873c07d
SSDEEP

24576:qgboaKh3zxAMH3++ADfVDHxO51i0hip+e+Fu97yv:q6EfAMXi76i4iYgyv

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

57ac087c275db90a0fee730b7fa59afc5efd5988cab0e7de4e081a0044c78b7e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 253KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.3MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE