2d0d086cf55e9662ea4cfa14531c1d8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d0d086cf55e9662ea4cfa14531c1d8f
Size

110KB
MD5

2d0d086cf55e9662ea4cfa14531c1d8f
SHA1

aa98f6acf2b7289b7b29f752bd037a92bc7ce836
SHA256

e646362900fb78bcd9447da547ff86ecd6c249df317427e3cf45d1fc7d088ca9
SHA512

60648d8c3d0f816928115fcb992b31c29c5437e67f3ff1cc63815240c81bdf88047a883fc9ced9fc86f8d8e77cff2a0893cc283909f0ccf295044cd49e536f89
SSDEEP

3072:AJu1DoI8kGsWiiO8SYJihmXPoKNTuyJ4z:AJuzGpXO8SlKwKNaY4z

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d0d086cf55e9662ea4cfa14531c1d8f

Files

2d0d086cf55e9662ea4cfa14531c1d8f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 171KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 869KB - Virtual size: 876KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE