Malwarebytes-Setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Malwarebytes-Setup.exe
Size 3.9MB
Sample260724-1pplmatfpf
SHA256 65ed72fcb4fa29d2ec4143483e2f13d7a4e03d1a8a620259aa51556a02249bfb
MD5 9f6336117f78a1211085ec1ed52dbf15
SHA1 53b53047d831381c8cd2202066a84875b58651fd
SHA512 c56821069fcc4cc86710fa6e5affffd35d8093c682d8442a393d45ecdb5dcf97d41f2a7119e87bf06d52df313f7eb1a8a0db7cd71decbe1c043f6c5661343be6
SSDEEP 98304:CkQtDXR8F1y8WU2ZBQA+IgZznf4Gz46Po/SIK:WBM11bSQamntg
TLSH
T1BD163337DC2385C0F8ED5AB987A5A7A279B3DE70B2946E3D460E1F74180484C6BC4DDA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Malwarebytes-Setup.exe

File Explorer

Malwarebytes-Setup.exe

.exe 3.9MB

Malwarebytes-Setup.exe

SHA256 65ed72fcb4fa29d2ec4143483e2f13d7a4e03d1a8a620259aa51556a02249bfb
MD5 9f6336117f78a1211085ec1ed52dbf15
SHA1 53b53047d831381c8cd2202066a84875b58651fd
SHA512 c56821069fcc4cc86710fa6e5affffd35d8093c682d8442a393d45ecdb5dcf97d41f2a7119e87bf06d52df313f7eb1a8a0db7cd71decbe1c043f6c5661343be6
SSDEEP 98304:CkQtDXR8F1y8WU2ZBQA+IgZznf4Gz46Po/SIK:WBM11bSQamntg
TLSH
T1BD163337DC2385C0F8ED5AB987A5A7A279B3DE70B2946E3D460E1F74180484C6BC4DDA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6811736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

150KB

Virtual Size

305KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

37KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1024B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

7KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.themida

Size

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Malwarebytes-Setup.exe

generic