41bdc26fec501b90d07df1438fd0a244 | Triage

Sharing

General

Target

41bdc26fec501b90d07df1438fd0a244
Size

3.2MB
MD5

41bdc26fec501b90d07df1438fd0a244
SHA1

0eb75103c051e7bf3400aaa4c2a7caa3c6037ac2
SHA256

2f1a17226b5f44df4a461c8576df0880b0bae5c81b21599d37ee49d4f4052d1b
SHA512

2486db9b930bcacde4262f32d1849884d0c42983f64aad1058340bf88bcbc30249e40411acd19ead131b8e31938d699ea4ee2e6e204f0f0410f7244c61ac3a69
SSDEEP

49152:UgeNQOBc+e4mEbS4sT7/Oblukxr87CzR2zE7NzzSSMu:BeNQLYm+sP/OBukxr0+uEZzOdu

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41bdc26fec501b90d07df1438fd0a244

Files

41bdc26fec501b90d07df1438fd0a244
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 87KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 878KB - Virtual size: 877KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.themida
Size: - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ