PasswordGenerator[.]exe | Triage

Resubmissions

29-06-2024 16:14

240629-tp5jhstgjm 10

29-06-2024 14:18

240629-rmpdeascmn 10

Sharing

General

Target

PasswordGenerator.exe
Size

6.8MB
MD5

24d6a1747fd94a5ff8208eb36a90c82c
SHA1

b997426ba296d7df9979b63d811208d32bde46df
SHA256

33eeb2e0f57adc35dd5ca9100e6020ee63518b5e8f22517d997ad17593cbb6c4
SHA512

7c458d8de277f1554b6d0c6d78e43d4fef645dba7a4b6fc3893507a85a89ff7cc508f8719ae326eedec3f5a674ce7f781bb60206b49439cbb7d45408a4f95918
SSDEEP

196608:RgNV+mtzsDwx/4eZ2+WcV0SwdTr+Dx/P5Qx9ZiypE:YVdsD6/4eZ2fQCdG9Z09ZiypE

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PasswordGenerator.exe

Files

PasswordGenerator.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 12KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 15B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.imports
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ