Overview

overview

9

Static

static

7

b67db636a324ce7a.exe

windows10-2004-x64

9

b67db636a324ce7a.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    b67db636a324ce7a.exe
  • Size 2.5MB
  • Sample260604-p7e95af15k
  • SHA256 77f977a5e55c30d287f46c9065739109d0c02fcf48cb6a749fc933bb856bc1ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • b67db636a324ce7a.exe
    .exe 2.5MB

b67db636a324ce7a.exe

  • SHA256 77f977a5e55c30d287f46c9065739109d0c02fcf48cb6a749fc933bb856bc1ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
fa:ee:6e:78:63:62:4b:b8:05:7c:a8:fd:39:77:c0:88:af:91:3c:44:5e:3a:8a:4c:ad:6c:d1:5f:02:e4:a2:e4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Premium Host,OU=Application Services,O=Silvergate Digital LLC,L=Boston,ST=MA,C=US
Minor OS version
0
Major OS version
6
Entry point
4304984
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths