jaffacakes118_Trojan-Dropper[.]Win32[.]Agent[.]irxh[.]a6c275153d559901c31d61f811453445

General

Target
jaffacakes118_Trojan-Dropper.Win32.Agent.irxh.a6c275153d559901c31d61f811453445
Size 37KB
Sample261006-te53asav8w
SHA256 a6b09456412ce2ba64d8c6cef9a8da5a5afe35b17d293605402e7cee1efacbbf
MD5 a6c275153d559901c31d61f811453445
SHA1 1e504ded4af01d634a4f100046a398b5f032244c
SHA512 1f24500cfe4ade1376ba16af8a16b4496c9e65a9a7c618af41388b7860e13f801b8f5541b39756d11475b66809d293499e93796586484174ccc26d156f7d0917
SSDEEP 384:qNP1e4hOMYad+exm+UmUzS70ZkWGQ0vgl+v9bqjyHHsLd:me4h8e++UNO71WGQ0vgl+v9bqGHHsLd
TLSH
T1960308179734A0F3C3650473366B1AA6E3EF587016246C6BEDB3431935A9B19ED383E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Agent.irxh.a6c275153d559901c31d61f811453445

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.irxh.a6c275153d559901c31d61f811453445

.exe 37KB

jaffacakes118_Trojan-Dropper.Win32.Agent.irxh.a6c275153d559901c31d61f811453445

SHA256 a6b09456412ce2ba64d8c6cef9a8da5a5afe35b17d293605402e7cee1efacbbf
MD5 a6c275153d559901c31d61f811453445
SHA1 1e504ded4af01d634a4f100046a398b5f032244c
SHA512 1f24500cfe4ade1376ba16af8a16b4496c9e65a9a7c618af41388b7860e13f801b8f5541b39756d11475b66809d293499e93796586484174ccc26d156f7d0917
SSDEEP 384:qNP1e4hOMYad+exm+UmUzS70ZkWGQ0vgl+v9bqjyHHsLd:me4h8e++UNO71WGQ0vgl+v9bqGHHsLd
TLSH
T1960308179734A0F3C3650473366B1AA6E3EF587016246C6BEDB3431935A9B19ED383E2
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4149

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

196B

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

452B

Virtual Size

452B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan-Dropper.Win32.Agent.irxh.a6c275153d559901c31d61f811453445

generic