jaffacakes118_Trojan-Ransom[.]Win32[.]Blocker[.]hejh[.]3ae454ac01b6176eacd179df492d692c

General

Target
jaffacakes118_Trojan-Ransom.Win32.Blocker.hejh.3ae454ac01b6176eacd179df492d692c
Size 52KB
Sample261006-vjn51sstdx
SHA256 a16409d26b013571ab08cbce7fe9464352c896004196d7cd56e6c18078916368
MD5 3ae454ac01b6176eacd179df492d692c
SHA1 44b3e7dffeb5cac3f1c9fdac3a2d9db38df0c432
SHA512 ebefe1c98795aca93a5be0e3d48705020a40cdcda1774e177a29e6240aaa2840eaa1de473fd2c4686805e18bd4b23c7ba1a959ebc57eacf7e2055aab3ba1168f
SSDEEP 1536:os5FvgTRMhUopIcoq5OH0Bpfl9kf5nouy8H:fF6mUopHolK30outH
TLSH
T11533F284A289E6EDF04904B80CABDFECDE85BD08A85099C575F4B73F3CB1B44ED19691
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Ransom.Win32.Blocker.hejh.3ae454ac01b6176eacd179df492d692c

jaffacakes118_Trojan-Ransom.Win32.Blocker.hejh.3ae454ac01b6176eacd179df492d692c

.exe 52KB

SHA256 a16409d26b013571ab08cbce7fe9464352c896004196d7cd56e6c18078916368
MD5 3ae454ac01b6176eacd179df492d692c
SHA1 44b3e7dffeb5cac3f1c9fdac3a2d9db38df0c432
SHA512 ebefe1c98795aca93a5be0e3d48705020a40cdcda1774e177a29e6240aaa2840eaa1de473fd2c4686805e18bd4b23c7ba1a959ebc57eacf7e2055aab3ba1168f
SSDEEP 1536:os5FvgTRMhUopIcoq5OH0Bpfl9kf5nouy8H:fF6mUopHolK30outH
TLSH
T11533F284A289E6EDF04904B80CABDFECDE85BD08A85099C575F4B73F3CB1B44ED19691
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

275376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths