f5a80619f99b2bbe81ee25835b3f71fc_JaffaCakes118

General

Target
f5a80619f99b2bbe81ee25835b3f71fc_JaffaCakes118
Size 1.7MB
Sample240417-ng4pcsdb67
SHA256 b7a16cb08484d1e58057ca2dd7666d315cde459b2b26ecf86855469a8f5a30a6
MD5 f5a80619f99b2bbe81ee25835b3f71fc
SHA1 0e5b887dac29b5f931e4c3a577280f10eba46b38
SHA512 5031abd527db133cb7e0e0877d397fa4054f5b2e1d3ad28e483edc409d79440495802cb74e6095dc497577bc57eb1ee9c72235e6f8d89ac804242ce0fa1c7cf9
SSDEEP 49152:bJoH3PXPrie5vQmbMB+GovrLTFbVURiOrbmaHUrv:bJo/XPD1b/FLT7aHmv
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a80619f99b2bbe81ee25835b3f71fc_JaffaCakes118

SHA256 b7a16cb08484d1e58057ca2dd7666d315cde459b2b26ecf86855469a8f5a30a6
MD5 f5a80619f99b2bbe81ee25835b3f71fc
SHA1 0e5b887dac29b5f931e4c3a577280f10eba46b38
SHA512 5031abd527db133cb7e0e0877d397fa4054f5b2e1d3ad28e483edc409d79440495802cb74e6095dc497577bc57eb1ee9c72235e6f8d89ac804242ce0fa1c7cf9
SSDEEP 49152:bJoH3PXPrie5vQmbMB+GovrLTFbVURiOrbmaHUrv:bJo/XPD1b/FLT7aHmv
MD5 SHA1 SHA512 SSDEEP

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20500

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths