5b9b7904a933513571de948b9ce54236 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b9b7904a933513571de948b9ce54236
Size

945KB
MD5

5b9b7904a933513571de948b9ce54236
SHA1

e4b878362f4833a53b0f36b780d5a3a13c66a3ff
SHA256

2eea78ab4e48b15bff12aace838ab4f2ca74eca9c5e6c4f165cb66b3d9910d89
SHA512

564bbd3a19326ef8cdecd1bca01c6e378f79a56574c8c87de9f1a88f48d6f41ce20556c88455787405cd1ea2b25ba65b04e9e80fc6d58ded2e3e7a5b2bd1cfb2
SSDEEP

24576:Em7x40p5buR9XFyu3BCAJdvx0q+h1KkwwL:r20fuR9AWCAJtx0zh1eq

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b9b7904a933513571de948b9ce54236

Files

5b9b7904a933513571de948b9ce54236
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 16KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 564KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE