TeamViewer_Setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
TeamViewer_Setup.exe
Size 6.8MB
Sample261030-m6vbjsec67
SHA256 0fe03e3006addff2cc661cc891d9f1c68798032335b8c7e2f1cd0b3a11649310
MD5 b259342fed6e5bdea82755d3b2690bb0
SHA1 a85d3d9ce678bf91c21778a8b847cf3f50766caf
SHA512 01916e6d0b0b40f3f8cb7cf9d0f18a1659e2917bef341e500f1903b327e4a90038f290a608d44651d800c0548baf9a232b6aca83b6fde4bf277643ddd7f7f0eb
SSDEEP 98304:mbWsy1G13vtVhKx6fxMp5KOsKDJnfUm2y3zHffP7YrQjSfb8wsRYWFJW63ZDw6eF:H1GW6Cp5KuDJfl/fE6EwPqWFfi4goC
TLSH
T12C76331D15C3BC21F5758BF83AE294660822B4334F5B2D6EF66F0F6798AD14CCB66980
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TeamViewer_Setup.exe

File Explorer

TeamViewer_Setup.exe

.exe 6.8MB

TeamViewer_Setup.exe

SHA256 0fe03e3006addff2cc661cc891d9f1c68798032335b8c7e2f1cd0b3a11649310
MD5 b259342fed6e5bdea82755d3b2690bb0
SHA1 a85d3d9ce678bf91c21778a8b847cf3f50766caf
SHA512 01916e6d0b0b40f3f8cb7cf9d0f18a1659e2917bef341e500f1903b327e4a90038f290a608d44651d800c0548baf9a232b6aca83b6fde4bf277643ddd7f7f0eb
SSDEEP 98304:mbWsy1G13vtVhKx6fxMp5KOsKDJnfUm2y3zHffP7YrQjSfb8wsRYWFJW63ZDw6eF:H1GW6Cp5KuDJfl/fE6EwPqWFfi4goC
TLSH
T12C76331D15C3BC21F5758BF83AE294660822B4334F5B2D6EF66F0F6798AD14CCB66980
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14561368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

2.0MB

Virtual Size

5.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

974KB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

18KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

124KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

696B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

27KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.themida

Size

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

16B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

TeamViewer_Setup.exe

generic