5180698b15a7a794891ce4a215b81264 | Triage

Sharing

General

Target

5180698b15a7a794891ce4a215b81264
Size

479KB
MD5

5180698b15a7a794891ce4a215b81264
SHA1

abba6ea40a2babdd8b9c68ac0a92888fa41097a6
SHA256

4fb0631da245a0e755f570d937cd170afa4ef287eb20c9ee3a38f7530b7ddcc3
SHA512

13dd2899a8f01fd2d61097a148b27d0a4e32274f70a66136321d54e7bfdd1aacad22e5d24e756b6df47cd7c71ff2520ceb02151afdc11306ba5dbab26c743688
SSDEEP

12288:akpr0l2hFP69Mn3aEX+ajKBM8g0g2k2S6a4FmEuXSKeLIS9:trA2jC3E/Z0g2V9FD0ep

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5180698b15a7a794891ce4a215b81264

Files

5180698b15a7a794891ce4a215b81264
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 13KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.6MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE