jaffacakes118_Trojan-Downloader[.]Win32[.]VB[.]ur[.]6673ae810ab7bb294c659d30382ac21e

General

Target
jaffacakes118_Trojan-Downloader.Win32.VB.ur.6673ae810ab7bb294c659d30382ac21e
Size 11KB
Sample261006-rwtpgsfc46
SHA256 1093aef1dfab77947c886699a942d90bf47a8f74a277f58865812ab29f8544b6
MD5 6673ae810ab7bb294c659d30382ac21e
SHA1 c3e92bdfe1be25e915f41ca611eba6153a7e4e23
SHA512 b54e916a229af793f1bdb034953b64993e3a3cfa8d9eecc81b01cefb818e540e1f38065c9796a9daa16fbb781a4c51b23cc0efdda36ca504912ac237792fd231
SSDEEP 192:/TOUqkDtzKbhYhKePJAxPwCMrpY7S8LqPZo5LdCfuR1nuO3sGWXXEl:/TNHzIKhAxPr6+S9Pfu7n57WXUl
TLSH
T153322C52FB8848B5E0C2107368B69BB79575FC728E22855B32E03B5F3C75114DC5AAD3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.VB.ur.6673ae810ab7bb294c659d30382ac21e

jaffacakes118_Trojan-Downloader.Win32.VB.ur.6673ae810ab7bb294c659d30382ac21e

.exe 11KB

SHA256 1093aef1dfab77947c886699a942d90bf47a8f74a277f58865812ab29f8544b6
MD5 6673ae810ab7bb294c659d30382ac21e
SHA1 c3e92bdfe1be25e915f41ca611eba6153a7e4e23
SHA512 b54e916a229af793f1bdb034953b64993e3a3cfa8d9eecc81b01cefb818e540e1f38065c9796a9daa16fbb781a4c51b23cc0efdda36ca504912ac237792fd231
SSDEEP 192:/TOUqkDtzKbhYhKePJAxPwCMrpY7S8LqPZo5LdCfuR1nuO3sGWXXEl:/TNHzIKhAxPr6+S9Pfu7n57WXUl
TLSH
T153322C52FB8848B5E0C2107368B69BB79575FC728E22855B32E03B5F3C75114DC5AAD3
MD5 SHA1 SHA512 SSDEEP TLSH

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20481

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths