jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]irwt[.]29d4a5278dadc0ab0ba144d9c8172734

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.irwt.29d4a5278dadc0ab0ba144d9c8172734
Size 61KB
Sample261006-te38psds3p
SHA256 0d0e86115238a1542c1babd424ba510ccffb95d13738302ef2c86b3dc13a2e64
MD5 29d4a5278dadc0ab0ba144d9c8172734
SHA1 d57caa943ff4afcb1e69abb5f7d3b6b62ab110d1
SHA512 e3f33afabec0f28a1d609c8e4f1d0819fcf35c436834ecff9dfb7968835e2e300df81e33024aa092467654f529528d5d56ee42f6d4a48434a17d020b17eb21e2
SSDEEP 1536:C1dI3AJhTf+5zzwhMvT/M1PeKoaym0/hCYURkzP:CPIKf+5zzwhMr01Pe5m0/hCYURk
TLSH
T1BA53E7237F581026F6504FF21C7681A97A16BE341A906D5B224AFB5D2C32643BDF932F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.irwt.29d4a5278dadc0ab0ba144d9c8172734

jaffacakes118_Trojan-Dropper.Win32.Agent.irwt.29d4a5278dadc0ab0ba144d9c8172734

.exe 61KB

SHA256 0d0e86115238a1542c1babd424ba510ccffb95d13738302ef2c86b3dc13a2e64
MD5 29d4a5278dadc0ab0ba144d9c8172734
SHA1 d57caa943ff4afcb1e69abb5f7d3b6b62ab110d1
SHA512 e3f33afabec0f28a1d609c8e4f1d0819fcf35c436834ecff9dfb7968835e2e300df81e33024aa092467654f529528d5d56ee42f6d4a48434a17d020b17eb21e2
SSDEEP 1536:C1dI3AJhTf+5zzwhMvT/M1PeKoaym0/hCYURkzP:CPIKf+5zzwhMr01Pe5m0/hCYURk
TLSH
T1BA53E7237F581026F6504FF21C7681A97A16BE341A906D5B224AFB5D2C32643BDF932F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths