3b1e7e5df7f530ad30e29bb081f1c6e1

General

Target
3b1e7e5df7f530ad30e29bb081f1c6e1
Size 20.1MB
Sample231225-y572sshcbp
SHA256 50feea35e7a324e67b951d06fc3f0f5b01199b47b3cfb5a693e33eec699f84f2
MD5 3b1e7e5df7f530ad30e29bb081f1c6e1
SHA1 c54b0c1e12658c7882de84bfe7de4794d4182b39
SHA512 83cb343bad4a00a0c2fb189057cc7fe2c642a8351816509c2239ff4503ac39322130a0f1e718691403c022be3ead6bae0b00a50aa1fd778bad8ba2bdd1c2da6f
SSDEEP 393216:5hgfUt5Jb7h8Ki8H/4B+/UI+CyW3V1na971fyfP1WH5ePswr/d1:5hXX7hhi8QRbBM1nm71fy3100soX
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b1e7e5df7f530ad30e29bb081f1c6e1

File Explorer

3b1e7e5df7f530ad30e29bb081f1c6e1

.exe 20.1MB

3b1e7e5df7f530ad30e29bb081f1c6e1

SHA256 50feea35e7a324e67b951d06fc3f0f5b01199b47b3cfb5a693e33eec699f84f2
MD5 3b1e7e5df7f530ad30e29bb081f1c6e1
SHA1 c54b0c1e12658c7882de84bfe7de4794d4182b39
SHA512 83cb343bad4a00a0c2fb189057cc7fe2c642a8351816509c2239ff4503ac39322130a0f1e718691403c022be3ead6bae0b00a50aa1fd778bad8ba2bdd1c2da6f
SSDEEP 393216:5hgfUt5Jb7h8Ki8H/4B+/UI+CyW3V1na971fyfP1WH5ePswr/d1:5hXX7hhi8QRbBM1nm71fy3100soX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

32473176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

109KB

Virtual Size

272KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

626B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

15B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.imports

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.themida

Size

Virtual Size

30.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

20.0MB

Virtual Size

20.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3b1e7e5df7f530ad30e29bb081f1c6e1

generic