5e6b8a5af02a43eca121fcb5900762fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e6b8a5af02a43eca121fcb5900762fe
Size

2.8MB
MD5

5e6b8a5af02a43eca121fcb5900762fe
SHA1

dfbfd38be312026636a67354df0b2ac6dd28d067
SHA256

79fa60be855355cd674e10eaebd31a626faba25c9981bfa1f81159be395c3580
SHA512

d2e4d33b4bd74172e79b31804cec71bc7a919aeb992ae901b5292f502e7d2de9ea3a3d3fcdf2a7b59702167cd796448c0398c91ae0437c19f9ce7ebb301abb6d
SSDEEP

49152:jmy3nfB3hqxPojyws7bs21vadMP6jytZsT2rC6afcjcNBR4J:jmiB3hqdPTfPQF10jc4

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e6b8a5af02a43eca121fcb5900762fe

Files

5e6b8a5af02a43eca121fcb5900762fe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 315KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 587KB - Virtual size: 881KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.9MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE