jaffacakes118_Packed[.]Win32[.]Black[.]a[.]da1105ff744bac4129df0fc030f17a95

General

Target
jaffacakes118_Packed.Win32.Black.a.da1105ff744bac4129df0fc030f17a95
Size 1.3MB
Sample261014-jv2ppsat3k
SHA256 97391a7383c72a1d44d91a26e8c9cbe726b4e44de1caf4621b34843c95558343
MD5 da1105ff744bac4129df0fc030f17a95
SHA1 d08d66f61fadbb8e74756421770d3d80dd722d41
SHA512 15fb20dd2cdf323f0fdf86822d2255876343208a87697648483486b42775b91c89d728958a532b6d5b0bcdec6cbc3238277d48d5839d4526e2a0a9b270d027a2
SSDEEP 24576:hP7S7FJXeHZIE7u5Zt7alriwP1uXn9A0cmUk+JNXN/ob+sd/Tvamt1:hP7Ee5tGt7qr18t+Zsdrht1
TLSH
T14355338A05E6175EC4F9C5F2A7952FA7F4C3AD1AF880189C6EFBBD304658055AC7C08E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

themida

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Packed.Win32.Black.a.da1105ff744bac4129df0fc030f17a95

SHA256 97391a7383c72a1d44d91a26e8c9cbe726b4e44de1caf4621b34843c95558343
MD5 da1105ff744bac4129df0fc030f17a95
SHA1 d08d66f61fadbb8e74756421770d3d80dd722d41
SHA512 15fb20dd2cdf323f0fdf86822d2255876343208a87697648483486b42775b91c89d728958a532b6d5b0bcdec6cbc3238277d48d5839d4526e2a0a9b270d027a2
SSDEEP 24576:hP7S7FJXeHZIE7u5Zt7alriwP1uXn9A0cmUk+JNXN/ob+sd/Tvamt1:hP7Ee5tGt7qr18t+Zsdrht1
TLSH
T14355338A05E6175EC4F9C5F2A7952FA7F4C3AD1AF880189C6EFBBD304658055AC7C08E
MD5 SHA1 SHA512 SSDEEP TLSH

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20500

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths