ecc82fb4cf30bd3246c0f340c6a8c349_JaffaCakes118

General

Target
ecc82fb4cf30bd3246c0f340c6a8c349_JaffaCakes118
Size 587KB
Sample240411-gepn4ade95
SHA256 4689a4eb90af5108f6f827a033d049984a505e24278c308b6ed4b0b12a251daa
MD5 ecc82fb4cf30bd3246c0f340c6a8c349
SHA1 d77705d92e756b3513d74fe25a0e25ba7d27c646
SHA512 2e77883d401a376442eca7674e0e05802c59ab4f267b75c9d5d9f1c63b9f3a90d6dc6c03f6fd188be08b583593d17de50503a1bdbf9a09516b97e1507e3ec0de
SSDEEP 12288:PqLrhGa9VTLyLTB17P4KN+n4a6V9ZvKZ24eSVfui51TWKkNSXPa:PqLrMGPA/7jBL9Zvk2lmfuITWKkIXP
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecc82fb4cf30bd3246c0f340c6a8c349_JaffaCakes118

SHA256 4689a4eb90af5108f6f827a033d049984a505e24278c308b6ed4b0b12a251daa
MD5 ecc82fb4cf30bd3246c0f340c6a8c349
SHA1 d77705d92e756b3513d74fe25a0e25ba7d27c646
SHA512 2e77883d401a376442eca7674e0e05802c59ab4f267b75c9d5d9f1c63b9f3a90d6dc6c03f6fd188be08b583593d17de50503a1bdbf9a09516b97e1507e3ec0de
SSDEEP 12288:PqLrhGa9VTLyLTB17P4KN+n4a6V9ZvKZ24eSVfui51TWKkNSXPa:PqLrMGPA/7jBL9Zvk2lmfuITWKkIXP
MD5 SHA1 SHA512 SSDEEP

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

40980

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths