90c768f34ae471b39548bb6bae4f8023

General

Target
90c768f34ae471b39548bb6bae4f8023
Size 3.2MB
Sample240205-cr7cfsacbk
SHA256 8c1903c5c355cc28369efd82f31ac34b40562b6fd38c816a43cb4faebe16a310
MD5 90c768f34ae471b39548bb6bae4f8023
SHA1 bfdbb5d691cdce802741b8c48af82e274acb453f
SHA512 e19a5ab628f76cae7c549497d7fe324f6380d26dd3163463841adf279427c9a1d5ebfaf97fc3b1455aff526f4ce40f4d9136552d437fe6bc38fd93444123e3ef
SSDEEP 49152:/dyCjoP4YyXfsLHb1jCno1Ii/8NERGrzARy4QhcXTMF5Wxp+lW1aM0M5WoAtu:/ECjoP4p07bhcoqBNeRGATMF+pQXve
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90c768f34ae471b39548bb6bae4f8023

File Explorer

90c768f34ae471b39548bb6bae4f8023

.exe 3.2MB

90c768f34ae471b39548bb6bae4f8023

SHA256 8c1903c5c355cc28369efd82f31ac34b40562b6fd38c816a43cb4faebe16a310
MD5 90c768f34ae471b39548bb6bae4f8023
SHA1 bfdbb5d691cdce802741b8c48af82e274acb453f
SHA512 e19a5ab628f76cae7c549497d7fe324f6380d26dd3163463841adf279427c9a1d5ebfaf97fc3b1455aff526f4ce40f4d9136552d437fe6bc38fd93444123e3ef
SSDEEP 49152:/dyCjoP4YyXfsLHb1jCno1Ii/8NERGrzARy4QhcXTMF5Wxp+lW1aM0M5WoAtu:/ECjoP4p07bhcoqBNeRGATMF+pQXve
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6067888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

267KB

Virtual Size

680KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

287B

Virtual Size

672B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

15B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.imports

Size

1024B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.themida

Size

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

90c768f34ae471b39548bb6bae4f8023

generic