4ce30eb0fca09c4418eb35d380f174a3 | Triage

Sharing

General

Target

4ce30eb0fca09c4418eb35d380f174a3
Size

564KB
MD5

4ce30eb0fca09c4418eb35d380f174a3
SHA1

97a93eb08ec3a7e98d2f8eca81637501e87645ec
SHA256

77890d873621b38e602a9c5ee99e7381c566b82fce5145f9c739cbb3a3238852
SHA512

33577689b67f3c5022a0c07c4ec7547c993d4c925bb08bfb0e87ece111087c6f7c02f55db743265565842db35cfbd4107efc79183859393c9968d66664272494
SSDEEP

12288:XMR0iKuSSyXK6PXY7g30+JDEbzHcSH/jZ7N/OPM/PEjQ7jx:I0vSyLPXN/EBHN79OPM/sYN

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ce30eb0fca09c4418eb35d380f174a3

Files

4ce30eb0fca09c4418eb35d380f174a3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 177KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 876KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 368KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE