jaffacakes118_Trojan-Dropper[.]Win32[.]Dorifel[.]awpy[.]03f2a3296b7e0eba6f5f97fa3454c553

General

Target
jaffacakes118_Trojan-Dropper.Win32.Dorifel.awpy.03f2a3296b7e0eba6f5f97fa3454c553
Size 604KB
Sample261006-tptr1sax2y
SHA256 a3ff0af42c1f12c8f663a6b84bdf80fda37f5dbf02721b21bb5274b6bf44ad33
MD5 03f2a3296b7e0eba6f5f97fa3454c553
SHA1 f7c53a916cdfdc088e98a6f382323925edaa3577
SHA512 2dca22a7d9a90449dac5162f68e28db23bbfdbfc3b75cd055c3448f6793eda95293418b4e3b19eac9ec852a8158724e56158c081d9e4e05a0970f8ddc53a9d8a
SSDEEP 6144:FfGGBGgkDWNTTHKpedc2+WzddS1XAMi/vS7Uugd:/BG8VHKcdc27zddS1XAMiqc
TLSH
T1FDD4E793157044E3EE63287E1D60AE960D76B83B3D084D2937AC72A56E3AEF7FC05245
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Dorifel.awpy.03f2a3296b7e0eba6f5f97fa3454c553

jaffacakes118_Trojan-Dropper.Win32.Dorifel.awpy.03f2a3296b7e0eba6f5f97fa3454c553

.exe 604KB

SHA256 a3ff0af42c1f12c8f663a6b84bdf80fda37f5dbf02721b21bb5274b6bf44ad33
MD5 03f2a3296b7e0eba6f5f97fa3454c553
SHA1 f7c53a916cdfdc088e98a6f382323925edaa3577
SHA512 2dca22a7d9a90449dac5162f68e28db23bbfdbfc3b75cd055c3448f6793eda95293418b4e3b19eac9ec852a8158724e56158c081d9e4e05a0970f8ddc53a9d8a
SSDEEP 6144:FfGGBGgkDWNTTHKpedc2+WzddS1XAMi/vS7Uugd:/BG8VHKcdc27zddS1XAMiqc
TLSH
T1FDD4E793157044E3EE63287E1D60AE960D76B83B3D084D2937AC72A56E3AEF7FC05245
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10922

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths