jaffacakes118_Barbie[.]Fairytopia[.]Die[.]Magie[.]des[.]Regenbogens[.]German[.]2006[.]DVDRiP[.]XviD-CRiTiCAL[.]exe

General

Target
jaffacakes118_Barbie.Fairytopia.Die.Magie.des.Regenbogens.German.2006.DVDRiP.XviD-CRiTiCAL.exe
Size 4.9MB
Sample260910-fex5ssfe72
SHA256 84c2611f7ed09dbc29ba4b00747c9c4e3a7138cd9e5f6e86d2d07bd4685f81c8
MD5 ba70672e5df179049db960325cb173bc
SHA1 d874e49c825bfc2dd601994eb77de51b260bc53d
SHA512 85289567d30e6010b8e752f8c1885c117acea464fc762a24f959c1519dcaf3a19aaa8dadf7a951395b28dc2f314540394f29960aabca5d0bfe7d88a4ac67218a
SSDEEP 6144:Ojit8HexorKlkvmJQzS9sXOhY7HtGcwEYMZN/hF/vKqmE1L:Ojit8HexorKlkvmJQzS9sXOhY7JwWf9
TLSH
T168364D00736A8622DBAF87FFC4E10F20573195969A85DB4B79CC25E01E253EAC5CB17E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
sample	SmartAssembly

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Barbie.Fairytopia.Die.Magie.des.Regenbogens.German.2006.DVDRiP.XviD-CRiTiCAL.exe

File Explorer

jaffacakes118_Barbie.Fairytopia.Die.Magie.des.Regenbogens.German.2006.DVDRiP.XviD-CRiTiCAL.exe

.exe 4.9MB

jaffacakes118_Barbie.Fairytopia.Die.Magie.des.Regenbogens.German.2006.DVDRiP.XviD-CRiTiCAL.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 84c2611f7ed09dbc29ba4b00747c9c4e3a7138cd9e5f6e86d2d07bd4685f81c8
MD5 ba70672e5df179049db960325cb173bc
SHA1 d874e49c825bfc2dd601994eb77de51b260bc53d
SHA512 85289567d30e6010b8e752f8c1885c117acea464fc762a24f959c1519dcaf3a19aaa8dadf7a951395b28dc2f314540394f29960aabca5d0bfe7d88a4ac67218a
SSDEEP 6144:Ojit8HexorKlkvmJQzS9sXOhY7HtGcwEYMZN/hF/vKqmE1L:Ojit8HexorKlkvmJQzS9sXOhY7JwWf9
TLSH
T168364D00736A8622DBAF87FFC4E10F20573195969A85DB4B79CC25E01E253EAC5CB17E
MD5 SHA1 SHA512 SSDEEP TLSH

SmartAssembly .NET packer

Detects SmartAssembly .NET packer.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

115620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

jaffacakes118_Barbie.Fairytopia.Die.Magie.des.Regenbogens.German.2006.DVDRiP.XviD-CRiTiCAL.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Barbie.Fairytopia.Die.Magie.des.Regenbogens.German.2006.DVDRiP.XviD-CRiTiCAL.exe

mscoree

dotnet