1092d76bbd26645126461c375fad89ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1092d76bbd26645126461c375fad89ea
Size

1.3MB
MD5

1092d76bbd26645126461c375fad89ea
SHA1

5c744aa9961ee0511530f229f0c119f9131ccfe5
SHA256

ad0465fdb3655dbdd9ec466e1f992f04da51e83a9089706da94c0b3bfa2167a8
SHA512

499266ccdddafad7dbd5dd84fc2a1d597121b0f6b30512aec10a9e27c69674cfcc25dc059ae8d56b011fa0a63b08ff8fd59fb72d90481074f0e0cb9d8865a821
SSDEEP

24576:XyZeL4Om9P9YabPHidtYnTd3/cMorxOPg8AV:yhHidt1Mo8iV

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1092d76bbd26645126461c375fad89ea

Files

1092d76bbd26645126461c375fad89ea
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.2MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE