---
id: 7417
title: "Unpack Themida Malware"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/unpack-themida-malware-2/"
published_at: "2020-01-02T11:19:18Z"
tags: ["reverse-engineering", "malware-analysis", "viettel", "unpacking", "themida", "iat"]
phying_url: "https://phying.com/item/7417"
lang: en
---

# Unpack Themida Malware

## Summary

Viettel Threat Intelligence shares techniques for unpacking Themida-packed malware, covering anti-debug bypass with ScyllaHide, locating OEP, dumping the process and rebuilding the IAT.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2020-01-02T11:19:18Z
- **Original:** https://blog.viettelcybersecurity.com/unpack-themida-malware-2/
- **Phying News:** https://phying.com/item/7417