14808eca972c49a54a733de2483d72c8 | Triage

Sharing

General

Target

14808eca972c49a54a733de2483d72c8
Size

580KB
MD5

14808eca972c49a54a733de2483d72c8
SHA1

9426c230a4e6a486c23c22d90713efe75ee8504f
SHA256

0455bf7ec014a9186c0251178007e0de7e8d3048b5345c6cac3cb10910e25cd6
SHA512

91b0264af935e860e854835045ad25d99d6a0912c065bd63eec553599d017fed4ddd0f2926dc5fbff7bae708ff1436dad06c5686aff6ef6b9c99ec2d2ff8fe11
SSDEEP

12288:94ynTtPmrN/wbQrh9h510bWF8meacwbEMGCuHIVYwDWMAw:fTtfbQt9b1gSBcobG3ZHm

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14808eca972c49a54a733de2483d72c8

Files

14808eca972c49a54a733de2483d72c8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 461KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE