bdaf723042dba23a2e8d59446b3ee87a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdaf723042dba23a2e8d59446b3ee87a
Size

442KB
MD5

bdaf723042dba23a2e8d59446b3ee87a
SHA1

f9ed7d6c81c09433a50f3a81741b0471754fcc53
SHA256

2810869ebdafed893ac30fae9d2ae0702b9e15a46044eb471cad791b9c57efe9
SHA512

7501f473ad644569bc0172b6cbee13853bc3c016333cdfad4457e852a2ef30de859f3f5ee667d6db8e7703a8a2432a7dbbb2880e000767261080ed68a78dc82a
SSDEEP

12288:BNBC37swSTdpaXmfsvy29kz5QSEWIAOQQi4cfyuclAwI:BELSTuWfG9gjInQQi4xd

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdaf723042dba23a2e8d59446b3ee87a

Files

bdaf723042dba23a2e8d59446b3ee87a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 7KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 425KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE