stealthworker | 769982202be73c0bfbbc67014ec597b4_JaffaCakes118

General

Target
769982202be73c0bfbbc67014ec597b4_JaffaCakes118
Size 6.7MB
Sample240526-ydntvaac98
SHA256 197540f4c6a8d34ff612689d3321dde4de693236b047f107a39c2d7e85ab198c
MD5 769982202be73c0bfbbc67014ec597b4
SHA1 31601c9aa8e24d9ddc2c1d5fd1f64ecf3df0853a
SHA512 08e2db28b877cf512a647528c00417529667b40b86648a347ce503aef46196eca8425b254af64b3fb8a08fe516ba26b9c6ce345ca8e8f547594443a45e58f3eb
SSDEEP 49152:hJXUBZlWe0vST1u3Q9YA0HkjN+5P79CTUaOGsu/MgJe5SLysXqSjFfADh71gvuXq:bEB3WeN1LiUNnTUuqCXXqe4n8kIX
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

StealthWorker payload 1 IoCs

botnet

resource	yara_rule
sample	stealthworker

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
769982202be73c0bfbbc67014ec597b4_JaffaCakes118

SHA256 197540f4c6a8d34ff612689d3321dde4de693236b047f107a39c2d7e85ab198c
MD5 769982202be73c0bfbbc67014ec597b4
SHA1 31601c9aa8e24d9ddc2c1d5fd1f64ecf3df0853a
SHA512 08e2db28b877cf512a647528c00417529667b40b86648a347ce503aef46196eca8425b254af64b3fb8a08fe516ba26b9c6ce345ca8e8f547594443a45e58f3eb
SSDEEP 49152:hJXUBZlWe0vST1u3Q9YA0HkjN+5P79CTUaOGsu/MgJe5SLysXqSjFfADh71gvuXq:bEB3WeN1LiUNnTUuqCXXqe4n8kIX
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

315920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths