SecuriteInfo[.]com[.]Trojan[.]Win32[.]Generic[.]10048[.]21020[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Win32.Generic.10048.21020.exe
Size

736KB
MD5

7dd3e46c043203ac4e4dad2e2df32e13
SHA1

7d1682b668e55eb6f7345bd456ad4d43a5508e87
SHA256

9d3949ceb7cb66269e9bb628e8dff940f39047346bf40f4cde7d1c713f27beb5
SHA512

58fb1b3b13cebd9a0a31ac1e37bd6e60e277a64049db5b7987d34081bbbf74bcdd731dbd5fee37fa948898516b03e3389870e385f325f294a0e8988405e9db7a
SSDEEP

12288:EJ99QOW/LaTkfeuBHdyIHpcsMfvvnQAIJ/G7neOuNwZjE6L+CtYOWh:EJ99QOuewhBVJaHnQQnebNwZRjtxq

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

SecuriteInfo.com.Trojan.Win32.Generic.10048.21020.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 754KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.themida
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ