jaffacakes118_A Farewell to Dragons[.]exe

General

Target
jaffacakes118_A Farewell to Dragons.exe
Size 5.5MB
Sample260910-dfjmpadp61
SHA256 f6fb086111b61e1b32bae24aa85751bf8cf75b59d58721d45a1275d86b2e2a49
MD5 14603dbfd97a908c66b3f32e008404c1
SHA1 9955cfa99223f6c9f46d16816f115259ece23eef
SHA512 5399bbb5157db369d47296b1af42eb6a3e6c9f6060d677c19a7b16a70c7937c05aba9d77f00e13b945c506641c0a5f4dcefa1f0d26c37fd277c116b635682b1a
SSDEEP 6144:KWzrWi6fJ5gwjLJHx4aqc+GnTSO93VUvXhhZ:74J5xtaa7TSC3OX3Z
TLSH
T1A346D0E3EB079407DD88C5BEAC2E2590B27D664D9503939FEE94B63483E31927AFD140
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
sample	SmartAssembly

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_A Farewell to Dragons.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f6fb086111b61e1b32bae24aa85751bf8cf75b59d58721d45a1275d86b2e2a49
MD5 14603dbfd97a908c66b3f32e008404c1
SHA1 9955cfa99223f6c9f46d16816f115259ece23eef
SHA512 5399bbb5157db369d47296b1af42eb6a3e6c9f6060d677c19a7b16a70c7937c05aba9d77f00e13b945c506641c0a5f4dcefa1f0d26c37fd277c116b635682b1a
SSDEEP 6144:KWzrWi6fJ5gwjLJHx4aqc+GnTSO93VUvXhhZ:74J5xtaa7TSC3OX3Z
TLSH
T1A346D0E3EB079407DD88C5BEAC2E2590B27D664D9503939FEE94B63483E31927AFD140
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

208125

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths