exodusbridged[.]exe

General

Target
exodusbridged.exe
Size 3.9MB
Sample260510-x3mgmsg12j
SHA256 da4d7e4cc472288de378b5cf2f76e9d4d3147fa25f693bc32b13729dffd091c7
MD5 2edeab4d19fcd5c710d92132333d3611
SHA1 349d3cf177dde6c469fa56fa714c0b1b54befe31
SHA512 25d8c79512758ce13aca6e1ec6ecac9c22f533261f72a42e0a1778a1a67db516d64d80ca51832abc1e00f9d17dc07c2e80bfb54ff3c658874177a02a9bdfaf43
SSDEEP 98304:2JUnRnJUDHWLDODZS/O0S35sEuZCkDxI68aBY9:2JynHmS/O3BuPFe9
TLSH
T1D316339B9E771739D18F27318B83865BD114A2A287BC03F476F967EDC429AC5E0C2163
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
exodusbridged.exe

SHA256 da4d7e4cc472288de378b5cf2f76e9d4d3147fa25f693bc32b13729dffd091c7
MD5 2edeab4d19fcd5c710d92132333d3611
SHA1 349d3cf177dde6c469fa56fa714c0b1b54befe31
SHA512 25d8c79512758ce13aca6e1ec6ecac9c22f533261f72a42e0a1778a1a67db516d64d80ca51832abc1e00f9d17dc07c2e80bfb54ff3c658874177a02a9bdfaf43
SSDEEP 98304:2JUnRnJUDHWLDODZS/O0S35sEuZCkDxI68aBY9:2JynHmS/O3BuPFe9
TLSH
T1D316339B9E771739D18F27318B83865BD114A2A287BC03F476F967EDC429AC5E0C2163
MD5 SHA1 SHA512 SSDEEP TLSH

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6496344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths