3c4042a421e1d83a57bbcb8acab2215a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c4042a421e1d83a57bbcb8acab2215a
Size

4.2MB
MD5

3c4042a421e1d83a57bbcb8acab2215a
SHA1

7789e6ae794e7d8ed737971cf9d4e587f40c2d2a
SHA256

a76477680c13fdd565311684a7137f06f7ecd93915b5cb758a717f8c22240d4f
SHA512

656c3da9e6b6fc17f8af3124751ac09c1335da8408b03ebb170532730e82f3b986b02a456162eab550b988376f93c4940916bcf11360280cf1183a02eef21bee
SSDEEP

98304:2obqbTWhxcNpaOp+QO8jTh45rWh1D1h3f8OuVuSZV:2yHmpTIQtj9cr81phyVuG

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4042a421e1d83a57bbcb8acab2215a

Files

3c4042a421e1d83a57bbcb8acab2215a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 423KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 585KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE