045dc8058cb94c3ad1ed194ef99f8c03 | Triage

Sharing

General

Target

045dc8058cb94c3ad1ed194ef99f8c03
Size

5.0MB
MD5

045dc8058cb94c3ad1ed194ef99f8c03
SHA1

40ca603cafc0e1900dd4b71b1b6c3e9beafcff99
SHA256

9c94c0ed0fbd1d5f998b0987b20943ed38b020ca01fd6014fda8020bad2b256f
SHA512

64a2ffcc82946c7bc4050de703ffa7ebdf0239a7d50a67465b3b55864a0f1b843a7337669e28e18bc5e3c2ddc1acb7c141691148e999e518027571f305aad426
SSDEEP

98304:Q6qoaYIlQ2M5cYE6o6ySrmfvh7t+c8vpYTUfdv3LyXTcri:Q6sZo5cYRoVvRt+Rh0CdvbyX

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
045dc8058cb94c3ad1ed194ef99f8c03

Files

045dc8058cb94c3ad1ed194ef99f8c03
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 456KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 21.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.4MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE