JaffaCakes118_d4ab23e5d1083c750f49a44ace8201025fc3d5a7752e52f9d939baac93b29918

General

Target
JaffaCakes118_d4ab23e5d1083c750f49a44ace8201025fc3d5a7752e52f9d939baac93b29918
Size 734.3MB
Sample241222-kftafs1lez
SHA256 d4ab23e5d1083c750f49a44ace8201025fc3d5a7752e52f9d939baac93b29918
MD5 71d4aa16916bccdbc9bd8b644c3e6bc0
SHA1 80d83af58f26d2602c32eb5f707def525777a9ff
SHA512 0f390865942a640b2771529bf5db335a718f023e355e9938f6c483f08db003877e1e4b2e7e85ce05271ffb2e2783820660b5927800ea8b7288c633beafb4bf95
SSDEEP 49152:PoNfVn4+HMH86lJsj8PL1/Pf98ORlp8E3kybEYcRc1WcM:7H8ysjMP1pRh0y4OdM
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_d4ab23e5d1083c750f49a44ace8201025fc3d5a7752e52f9d939baac93b29918

JaffaCakes118_d4ab23e5d1083c750f49a44ace8201025fc3d5a7752e52f9d939baac93b29918

.exe 734.3MB

SHA256 d4ab23e5d1083c750f49a44ace8201025fc3d5a7752e52f9d939baac93b29918
MD5 71d4aa16916bccdbc9bd8b644c3e6bc0
SHA1 80d83af58f26d2602c32eb5f707def525777a9ff
SHA512 0f390865942a640b2771529bf5db335a718f023e355e9938f6c483f08db003877e1e4b2e7e85ce05271ffb2e2783820660b5927800ea8b7288c633beafb4bf95
SSDEEP 49152:PoNfVn4+HMH86lJsj8PL1/Pf98ORlp8E3kybEYcRc1WcM:7H8ysjMP1pRh0y4OdM
MD5 SHA1 SHA512 SSDEEP

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3693703

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths