b9974532798609fa8185a51c0899047a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9974532798609fa8185a51c0899047a
Size

3.2MB
MD5

b9974532798609fa8185a51c0899047a
SHA1

c0f2c586aa0a38767487b56f85b7ecaac6b09ea0
SHA256

00e670c1ea6bca3684347b925a9dc36f55ef5a9ec1f1425984e7ba22fdc02268
SHA512

a51b4a8f423d3c18de1ac2fc148632320ea8fad45d02f976f47dbe30770cc8b568451b90e30e30942590d52ea1722cb03b4c6e4fe8d15fe9ca1788176410e7e6
SSDEEP

98304:Y54fqakRknFBaqWJ/0AzuOXJchJOi4iTQgZ:PqBRknfY/0Az3JcbOo

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9974532798609fa8185a51c0899047a

Files

b9974532798609fa8185a51c0899047a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 382KB - Virtual size: 968KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 455KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE