erto3e4rortoergn[.]exe

Resubmissions

24/10/2026, 22:25

261024-2bzecaev8r9

24/10/2026, 22:10

261024-13n71sst7k9

24/10/2026, 21:46

261024-1m1wwacw319

24/10/2026, 21:43

261024-1kwjdass5j9

Sharing

Copy URL Twitter E-mail

General

Target
erto3e4rortoergn.exe
Size 6.2MB
Sample261024-2bzecaev8r
SHA256 e668ed31d8c902b84817def197b2cca8f0502acd28199ef975b9314c953a7f52
MD5 265c01ed99750b8eabe840e4f0acc804
SHA1 a0cd0d2d43e98164cf94d93cb3c13478333dbb31
SHA512 c023b80df899fe593f996954954b39986d2ec87d206cc253162ad369b8c0e54c71633531ec2e1abeea1dacf5471db545bd05b4ba59bad85557651fe6af48b91a
SSDEEP 196608:F70QVt8X7+qLqTdGdJVinATx2xOXL39iFS:R8X7+uqTmJQATxvXL391
TLSH
T10266332CA6311B79FB042A7A18D1639CB380C8A645B58FE03E213DFF26687DDA717D51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
erto3e4rortoergn.exe

File Explorer

erto3e4rortoergn.exe

.exe 6.2MB

erto3e4rortoergn.exe

SHA256 e668ed31d8c902b84817def197b2cca8f0502acd28199ef975b9314c953a7f52
MD5 265c01ed99750b8eabe840e4f0acc804
SHA1 a0cd0d2d43e98164cf94d93cb3c13478333dbb31
SHA512 c023b80df899fe593f996954954b39986d2ec87d206cc253162ad369b8c0e54c71633531ec2e1abeea1dacf5471db545bd05b4ba59bad85557651fe6af48b91a
SSDEEP 196608:F70QVt8X7+qLqTdGdJVinATx2xOXL39iFS:R8X7+uqTmJQATxvXL391
TLSH
T10266332CA6311B79FB042A7A18D1639CB380C8A645B58FE03E213DFF26687DDA717D51
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11677784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

129KB

Virtual Size

235KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

1.5MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1024B

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

7KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.themida

Size

Virtual Size

7.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

16B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

erto3e4rortoergn.exe

generic