4cd6ed7761505120519783a8a13ef42a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cd6ed7761505120519783a8a13ef42a
Size

8KB
MD5

4cd6ed7761505120519783a8a13ef42a
SHA1

215660cb9f2dd95c45b7cd7eb8ad4ff2eebc4e6d
SHA256

e5ff520f545899740208435254ef6274f4e3e1fec03bc46ac76ff131f05f15fc
SHA512

6df173eb4d614e81226b8b0069b9c6ae06b9ce872153b87ee58383919dcb965c5e5cdcf97b3233b53015fe8049ace13d326149afa48c8102f7878907ee2a7a33
SSDEEP

96:vEgpDHL4WvaGxMLO/w74ITiugoJ+ZyP2Ry:suDHL9yQMRkRzoYo2Ry

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cd6ed7761505120519783a8a13ef42a

Files

4cd6ed7761505120519783a8a13ef42a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 932KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 700KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE