jaffacakes118_Der[.]Herr[.]der[.]Ringe[.]2[.]Die[.]zwei[.]Tuerme[.]German[.]DL[.]2002[.]1080p[.]BluRay[.]x264-DEFUSED[.]exe

General

Target
jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.DL.2002.1080p.BluRay.x264-DEFUSED.exe
Size 4.8MB
Sample260910-fbav4agk5v
SHA256 3f357a85eace8cb235ce285a5f3c44aff114fb19956f9e53b6f14f70e1975bfe
MD5 4bab38c9acdb3abced69df9a651b01f6
SHA1 45a3400a308a66863de4af73329f056a3177d3bc
SHA512 a85ef0041fe03fada8baa28b504c3a0b08f74ba48b3bfbade91aa1ee1f065d3c890daa308f5d4545cd77f38a5e22ae8890e9b8e05c1c8abe232b1dca12e634b5
SSDEEP 6144:Ojit8HexorKlkvmJQzS9sXOhY7HtGcwEYMZN/hF/vKqmE1L:Ojit8HexorKlkvmJQzS9sXOhY7JwWf9
TLSH
T12E364D00736A8622DBAF87FFC4E10F20573195969A85DB4B79CC25E01E253EAC5CB17E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
sample	SmartAssembly

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.DL.2002.1080p.BluRay.x264-DEFUSED.exe

File Explorer

jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.DL.2002.1080p.BluRay.x264-DEFUSED.exe

.exe 4.8MB

jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.DL.2002.1080p.BluRay.x264-DEFUSED.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3f357a85eace8cb235ce285a5f3c44aff114fb19956f9e53b6f14f70e1975bfe
MD5 4bab38c9acdb3abced69df9a651b01f6
SHA1 45a3400a308a66863de4af73329f056a3177d3bc
SHA512 a85ef0041fe03fada8baa28b504c3a0b08f74ba48b3bfbade91aa1ee1f065d3c890daa308f5d4545cd77f38a5e22ae8890e9b8e05c1c8abe232b1dca12e634b5
SSDEEP 6144:Ojit8HexorKlkvmJQzS9sXOhY7HtGcwEYMZN/hF/vKqmE1L:Ojit8HexorKlkvmJQzS9sXOhY7JwWf9
TLSH
T12E364D00736A8622DBAF87FFC4E10F20573195969A85DB4B79CC25E01E253EAC5CB17E
MD5 SHA1 SHA512 SSDEEP TLSH

SmartAssembly .NET packer

Detects SmartAssembly .NET packer.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

115620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.DL.2002.1080p.BluRay.x264-DEFUSED.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Der.Herr.der.Ringe.2.Die.zwei.Tuerme.German.DL.2002.1080p.BluRay.x264-DEFUSED.exe

mscoree

dotnet