71b04e2d36fef06e17baafe2fd1ace5534bfc466b15f10495bc310e50bec972a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
71b04e2d36fef06e17baafe2fd1ace5534bfc466b15f10495bc310e50bec972a.exe
Size 3.2MB
Sample260814-be39laed79
SHA256 71b04e2d36fef06e17baafe2fd1ace5534bfc466b15f10495bc310e50bec972a
MD5 dbbe48bb05baf9092fa8742046fe6bee
SHA1 bf095f4445294f8450deb87b470801ea5718013b
SHA512 c46e23c4f762c2323c659b0e15c7bd2770f336ed107cf277516c5a67729c205e80185a854037d6286acd6a07ab8a9e7e7b0663f44383e2074870be62234c350e
SSDEEP 98304:hHHbrl9PBo3fP6oCp5E2TowN7BH0nU7JkQXiM2q:NlI3C5EMFBUn2kOV
TLSH
T1BEF5331EBB3CB076DCDF2E3208929A6AA734F77405B5B08E209FE55F8693123527452D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

File Explorer

71b04e2d36fef06e17baafe2fd1ace5534bfc466b15f10495bc310e50bec972a.exe

.exe 3.2MB

71b04e2d36fef06e17baafe2fd1ace5534bfc466b15f10495bc310e50bec972a.exe

SHA256 71b04e2d36fef06e17baafe2fd1ace5534bfc466b15f10495bc310e50bec972a
MD5 dbbe48bb05baf9092fa8742046fe6bee
SHA1 bf095f4445294f8450deb87b470801ea5718013b
SHA512 c46e23c4f762c2323c659b0e15c7bd2770f336ed107cf277516c5a67729c205e80185a854037d6286acd6a07ab8a9e7e7b0663f44383e2074870be62234c350e
SSDEEP 98304:hHHbrl9PBo3fP6oCp5E2TowN7BH0nU7JkQXiM2q:NlI3C5EMFBUn2kOV
TLSH
T1BEF5331EBB3CB076DCDF2E3208929A6AA734F77405B5B08E209FE55F8693123527452D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Themida packer

Detects Themida, an advanced Windows software protection system.

themida

Digest

05:f1:d3:fd:ac:39:29:b7:e9:17:fd:c1:e7:ed:83:63:0d:f1:a6:76:57:04:9f:6b:87:fe:63:ec:97:d6:07:18

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Brittnay Hooper,O=Brittnay Hooper,L=Humble,ST=Texas,C=US

Chains

Aug 13, 2026

CN=Brittnay Hooper,O=Brittnay Hooper,L=Humble,ST=Texas,C=US

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Serial Number

7b:2c:9b:d3:16:80:32:99

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 12, 2016 - Feb 12, 2041

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

64:33:51:d3:c7:38:9f:08

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 24, 2016 - Jun 24, 2031

Subject

CN=Brittnay Hooper,O=Brittnay Hooper,L=Humble,ST=Texas,C=US

Serial Number

2a:b9:94:aa:02:e7:0b:76:8c:c8:98:48:14:bd:8f:41

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 9, 2026 - Jul 9, 2027

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

5902424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

52KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

20KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.themida

Size

Virtual Size

5.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

71b04e2d36fef06e17baafe2fd1ace5534bfc466b15f10495bc310e50bec972a.exe

generic