jaffacakes118_Der Fall Ivan Demjanjuk_ NS Verbrechen vor GerichtDer Fall Ivan Demjanjuk_ NS Verbrechen vor Gericht[.]exe

General

Target
jaffacakes118_Der Fall Ivan Demjanjuk_ NS Verbrechen vor GerichtDer Fall Ivan Demjanjuk_ NS Verbrechen vor Gericht.exe
Size 8.1MB
Sample260910-eblrxsyvds
SHA256 0c31aca3657a0018000c885d09d55cee9df1c615d2d25e0b8f73b46008688ea7
MD5 b93534c3a1cf6131621a3ef73ecebacb
SHA1 e10e52ad9e455f44b6881c455e28421e72ebe7e4
SHA512 52dc7b321c84ddfb253bcdcba684386b6dfa65d17eac9327be3711ab201c237a8a7e2050e46c71fbebbb365137ac354125a7180eee182d05e75afb339cfcf6cb
SSDEEP 6144:Ojit8HexorKlkvmJQzS9sXOhY7HtGcwEYMZN/hF/vKqmE1L:Ojit8HexorKlkvmJQzS9sXOhY7JwWf9
TLSH
T198864D00736A8622DBAF87FFC4E10F20573195969A85DB4B79CC25E01E253EAC5CB17E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
sample	SmartAssembly

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Der Fall Ivan Demjanjuk_ NS Verbrechen vor GerichtDer Fall Ivan Demjanjuk_ NS Verbrechen vor Gericht.exe

File Explorer

jaffacakes118_Der Fall Ivan Demjanjuk_ NS Verbrechen vor GerichtDer Fall Ivan Demjanjuk_ NS Verbrechen vor Gericht.exe

.exe 8.1MB

jaffacakes118_Der Fall Ivan Demjanjuk_ NS Verbrechen vor GerichtDer Fall Ivan Demjanjuk_ NS Verbrechen vor Gericht.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0c31aca3657a0018000c885d09d55cee9df1c615d2d25e0b8f73b46008688ea7
MD5 b93534c3a1cf6131621a3ef73ecebacb
SHA1 e10e52ad9e455f44b6881c455e28421e72ebe7e4
SHA512 52dc7b321c84ddfb253bcdcba684386b6dfa65d17eac9327be3711ab201c237a8a7e2050e46c71fbebbb365137ac354125a7180eee182d05e75afb339cfcf6cb
SSDEEP 6144:Ojit8HexorKlkvmJQzS9sXOhY7HtGcwEYMZN/hF/vKqmE1L:Ojit8HexorKlkvmJQzS9sXOhY7JwWf9
TLSH
T198864D00736A8622DBAF87FFC4E10F20573195969A85DB4B79CC25E01E253EAC5CB17E
MD5 SHA1 SHA512 SSDEEP TLSH

SmartAssembly .NET packer

Detects SmartAssembly .NET packer.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

115620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

jaffacakes118_Der Fall Ivan Demjanjuk_ NS Verbrechen vor GerichtDer Fall Ivan Demjanjuk_ NS Verbrechen vor Gericht.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Der Fall Ivan Demjanjuk_ NS Verbrechen vor GerichtDer Fall Ivan Demjanjuk_ NS Verbrechen vor Gericht.exe

mscoree

dotnet