SecuriteInfo[.]com[.]Trojan[.]Win32[.]Themida[.]9179[.]6045 | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.Win32.Themida.9179.6045
Size

2.3MB
MD5

60b947d95d8652f9454352cac716410a
SHA1

a7e75b7ab08be8deef08fe753f87e89211e56a01
SHA256

30915223321b3471df07c3491e325ac37dfa2416f8d5b11e4513da31446dc4e0
SHA512

d810e5f45c73fda127c66e6a8806128dc523f702bc468f25ed5726bcab904a55279094a6100ee553469c4e0b8670d08e7f8cc42adf26eb91755ac1f180dbfa4e
SSDEEP

49152:1IsL5KveHS+cKjh1dk/X11dwFryT3t3aycNEIbC3XnC+7ZB+SaMsJ8dqcNrmi/u:bQvICIhDkt16FrI30+XC+ySacNrmgu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Win32.Themida.9179.6045

Files

SecuriteInfo.com.Trojan.Win32.Themida.9179.6045
.exe windows:5 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 1.5MB - Virtual size: 30.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 960KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dkbhqzla
Size: 786KB - Virtual size: 788KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

inawvqpb
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE