2c7af484e97f029be248f9700104eccc796eb2cfe3f5e49f1f6496646f61e9ad

Sharing

Copy URL

Twitter E-mail

General

Target

2c7af484e97f029be248f9700104eccc796eb2cfe3f5e49f1f6496646f61e9ad
Size

4.4MB
MD5

fbc7b7627c4bfd5a56b7382a81ba78aa
SHA1

015ca38ca4a5b580b3613f4c421b07e31ebbf69b
SHA256

2c7af484e97f029be248f9700104eccc796eb2cfe3f5e49f1f6496646f61e9ad
SHA512

470e6a489fff4ff847e903cd9c71761e15b93a72f7ca5320aa9d6b384162facc7c452cdbaefdef4bc59edeb3f4ddeb5c5858b0edec34aa5579f0fc97cc6f7257
SSDEEP

98304:jxPXeFRBqYcDgwKqsMllGrK7AdI+9SLuHLH/oVU3xjRX:jx085Kqsk6zdIHLqfooxl

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c7af484e97f029be248f9700104eccc796eb2cfe3f5e49f1f6496646f61e9ad

Files

2c7af484e97f029be248f9700104eccc796eb2cfe3f5e49f1f6496646f61e9ad
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

Size: 491B - Virtual size: 919B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 246B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 37B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 89B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 7B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 7B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 21B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.themida
Size: - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: 491B - Virtual size: 919B

Size: 246B - Virtual size: 880B

Size: 1KB - Virtual size: 4KB

Size: 37B - Virtual size: 48B

Size: 89B - Virtual size: 224B

Size: 7B - Virtual size: 4KB

Size: 7B - Virtual size: 4KB

Size: 21B - Virtual size: 4KB

.imports Size: 512B - Virtual size: 4KB

.themida Size: - Virtual size: 7.0MB

.boot Size: 4.4MB - Virtual size: 4.4MB

.imports
Size: 512B - Virtual size: 4KB

.themida
Size: - Virtual size: 7.0MB

.boot
Size: 4.4MB - Virtual size: 4.4MB