fcc74b1e563479a73dede4d0437e5875 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcc74b1e563479a73dede4d0437e5875
Size

952KB
MD5

fcc74b1e563479a73dede4d0437e5875
SHA1

097c20abca780270d15aa7668665c4cb26c21995
SHA256

8da4de5de1ae5d2c52f0e4a92ef162330a9121d8d76343a843d9fdf174681d9d
SHA512

6134d9eb97a4721ad95b0ffa47717e6a27be93cd664beba2c47d92e02e8cd3092468161e6977a21525f0d530b5e5be016fc00ab27289b8b79c591f90265249bf
SSDEEP

24576:ryxq1zwXPMPBHAZwpgT1FjWqUfhYMHcPnyxACQbiZ:/zwXkpHGUk1FjRUZL8Ka7i

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcc74b1e563479a73dede4d0437e5875

Files

fcc74b1e563479a73dede4d0437e5875
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 472KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 468KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE