7059c97afa43fe9081733ee47a037d6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7059c97afa43fe9081733ee47a037d6d
Size

5.2MB
MD5

7059c97afa43fe9081733ee47a037d6d
SHA1

aa73caef12bd0a88ea63d03d331498624b6885ff
SHA256

225e3655c578ce7d405643afc5cacdc6ee6b1d50a28df020f655ed5c4534aae5
SHA512

80583a10083ed2dabcffe19adbfbff149419e1b2510517c5de686d309213cf42620570f5a1232b0eb115b784aa6760fc1d9f8b35d8111e9d70e17483dbd2ca00
SSDEEP

98304:16bVluE4j6c6jtyyx1yk65BlhxkjJP2ya:IBluE4At3176xhGjZ2ya

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7059c97afa43fe9081733ee47a037d6d

Files

7059c97afa43fe9081733ee47a037d6d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 445KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 1.2MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE