MCC Loader Premium[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

MCC Loader Premium.exe
Size

79.6MB
MD5

2d28a8e4bcde6629197d48a8f2a848ee
SHA1

1f41a3aa7739ae5656f4dc6e09e44da5999a8af6
SHA256

aafd0f1e73d513b15e7a1c45e573b9f301b8f064025eea5dfca62085676e2449
SHA512

6e863d9a7e567a77da7ca536d89520ef7afe12a1ac0789e66fbb8a5cf0d73bc05f1e020595c6b08ce435a5b300a1bb99f118b33adc6695251bc5fe1f4f249571
SSDEEP

1572864:5QARYQt1nXnFP/V4f6Gj53ikjt4jRq2GqFOPV5nTQJl2qHWB75iltJWA2Uc3UFQQ:5QAmSt/VG6RmtCRlGPrnel2qHO5ivJvX

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MCC Loader Premium.exe

Files

MCC Loader Premium.exe
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 94KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 38KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vm_sec
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
fetch.pyc

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: 94KB - Virtual size: 171KB

Size: 38KB - Virtual size: 74KB

Size: 512B - Virtual size: 12KB

Size: 5KB - Virtual size: 8KB

Size: 512B - Virtual size: 500B

Size: 10KB - Virtual size: 25KB

Size: 1KB - Virtual size: 1KB

.vm_sec Size: 20KB - Virtual size: 20KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 26KB - Virtual size: 26KB

.themida Size: - Virtual size: 5.9MB

.boot Size: 3.5MB - Virtual size: 3.5MB

.vm_sec
Size: 20KB - Virtual size: 20KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 26KB - Virtual size: 26KB

.themida
Size: - Virtual size: 5.9MB

.boot
Size: 3.5MB - Virtual size: 3.5MB