jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]ayqa[.]91f3f5606a7e0865d1a88e1e09e905c6

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.ayqa.91f3f5606a7e0865d1a88e1e09e905c6
Size 27KB
Sample261006-spesesh14v
SHA256 ca434737fcbf92f53d690809806ac123f7b5005ab919fa656ab7733672ec90e7
MD5 91f3f5606a7e0865d1a88e1e09e905c6
SHA1 624c0ae30386072276040326717eb489746885ea
SHA512 1db2924d2e5300a3ad4cf4ea09c687ebfd69891cbbbf0b93813309dfe73c8f3bedfaf390f0e7ffa904114de5d671c3f72b0d29271f22ca791e154805a8d64b7f
SSDEEP 192:NdrNngrlQXh3IV1i6ag8pDRTWPXLE0Pv05YCF8LsSJEWrdD:Nd5Yc43aHhWPXA030iCCLsYEWrt
TLSH
T1DFC2295B7F049A33C7D2823B268C997EE7BA427039666E43E754834E1C726E4E476309
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.ayqa.91f3f5606a7e0865d1a88e1e09e905c6

jaffacakes118_Trojan-Dropper.Win32.Agent.ayqa.91f3f5606a7e0865d1a88e1e09e905c6

.exe 27KB

SHA256 ca434737fcbf92f53d690809806ac123f7b5005ab919fa656ab7733672ec90e7
MD5 91f3f5606a7e0865d1a88e1e09e905c6
SHA1 624c0ae30386072276040326717eb489746885ea
SHA512 1db2924d2e5300a3ad4cf4ea09c687ebfd69891cbbbf0b93813309dfe73c8f3bedfaf390f0e7ffa904114de5d671c3f72b0d29271f22ca791e154805a8d64b7f
SSDEEP 192:NdrNngrlQXh3IV1i6ag8pDRTWPXLE0Pv05YCF8LsSJEWrdD:Nd5Yc43aHhWPXA030iCCLsYEWrt
TLSH
T1DFC2295B7F049A33C7D2823B268C997EE7BA427039666E43E754834E1C726E4E476309
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8305

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths