3f3a0272ae47d64311dd18d68b5bf17b[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
3f3a0272ae47d64311dd18d68b5bf17b.bin
Size 3.1MB
Sample240603-bktmcafb94
SHA256 14dd4f1b77f57761a3d5a91c16f64c0ed56f0a62563eeaab70583693f29ea202
MD5 3f3a0272ae47d64311dd18d68b5bf17b
SHA1 ebb16336132405852fbbdb9f089179ac51dd29e1
SHA512 abe793ad4772b01829f1e1be60d90dcdeedd622a42163eb89f79a9e73669f33186dcf9c2fad5c03d29db1f96e1559722be7b9ebf7ff698a043061dc945d3ea9e
SSDEEP 49152:njzdEJLwDphYAp8AacCX8BFdCXMKsn7pKTTBqsESNUqLxt2rzPnHRoZcw:n3iJ8Dp28BF4xs7A3BQSKqLxt2PPnxb
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f3a0272ae47d64311dd18d68b5bf17b.bin

File Explorer

3f3a0272ae47d64311dd18d68b5bf17b.bin

.exe 3.1MB

3f3a0272ae47d64311dd18d68b5bf17b.bin

SHA256 14dd4f1b77f57761a3d5a91c16f64c0ed56f0a62563eeaab70583693f29ea202
MD5 3f3a0272ae47d64311dd18d68b5bf17b
SHA1 ebb16336132405852fbbdb9f089179ac51dd29e1
SHA512 abe793ad4772b01829f1e1be60d90dcdeedd622a42163eb89f79a9e73669f33186dcf9c2fad5c03d29db1f96e1559722be7b9ebf7ff698a043061dc945d3ea9e
SSDEEP 49152:njzdEJLwDphYAp8AacCX8BFdCXMKsn7pKTTBqsESNUqLxt2rzPnHRoZcw:n3iJ8Dp28BF4xs7A3BQSKqLxt2PPnxb
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5386328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

302KB

Virtual Size

555KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

51KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

33KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

18KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.themida

Size

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3f3a0272ae47d64311dd18d68b5bf17b.bin

generic