666cd8778cab61cb37adb0d92216fa75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

666cd8778cab61cb37adb0d92216fa75
Size

2.8MB
MD5

666cd8778cab61cb37adb0d92216fa75
SHA1

34e16cde1f1cdb5f2b94814017b9fdbb856578d5
SHA256

8b1de857ae9fabba1705f1535495b139dd08722904a90c38a5d6a8f170b23af2
SHA512

b3cb22a5c8074188f1c4239eb77c8f9b34d3360f837f0734b43d99754b987c3852c8772e6675bdf019fb34abe1edd2c8ff3327f6ad00c7b59c7b43f6a7d29742
SSDEEP

49152:JfoDE6fEIRvtZBofRe8D6EDnF7c0DTHF3KfkyXhIXerLGWUbj2:iE6fE0xofT/F71PF3Kfk8euyj

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666cd8778cab61cb37adb0d92216fa75

Files

666cd8778cab61cb37adb0d92216fa75
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE