jaffacakes118_Backdoor[.]Win32[.]DsBot[.]jm[.]e775857fc31b67678e6d2fb646328b70

General

Target
jaffacakes118_Backdoor.Win32.DsBot.jm.e775857fc31b67678e6d2fb646328b70
Size 178KB
Sample261009-tkb2eagw2n
SHA256 c2718051c648608475225ba8453fcc99dce7dc5b51d03af9de92adfb5d65e8b6
MD5 e775857fc31b67678e6d2fb646328b70
SHA1 e6bf6504c48c36dbd0c439a91e867371852df054
SHA512 3f892ec5ca97c3a396ee392cd2bb704f45be0ea7bd93d96ec2871aaf6609bebc506e3bfd4c8029d511af459ace75c91c0d8e88a0542446232e936803901a4e7e
SSDEEP 3072:gubarmcsTvFsUyfIHJEKf6/ciiBeAbByJfjq1O3a5Fyk82Bb6nBejTzjPVfKz0Iv:g2ansTF3Hk/DAbgq1OK58qb9bVfKYBqx
TLSH
T1620412E8D3A85CAFD497A9FC31DC5016A2AE601350AF5F42150648394CB66BFE1236BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.DsBot.jm.e775857fc31b67678e6d2fb646328b70

jaffacakes118_Backdoor.Win32.DsBot.jm.e775857fc31b67678e6d2fb646328b70

.exe 178KB

IMPHASH 98c88d882f01a3f6ac1e5f7dfd761624
SHA256 c2718051c648608475225ba8453fcc99dce7dc5b51d03af9de92adfb5d65e8b6
MD5 e775857fc31b67678e6d2fb646328b70
SHA1 e6bf6504c48c36dbd0c439a91e867371852df054
SHA512 3f892ec5ca97c3a396ee392cd2bb704f45be0ea7bd93d96ec2871aaf6609bebc506e3bfd4c8029d511af459ace75c91c0d8e88a0542446232e936803901a4e7e
SSDEEP 3072:gubarmcsTvFsUyfIHJEKf6/ciiBeAbByJfjq1O3a5Fyk82Bb6nBejTzjPVfKz0Iv:g2ansTF3Hk/DAbgq1OK58qb9bVfKYBqx
TLSH
T1620412E8D3A85CAFD497A9FC31DC5016A2AE601350AF5F42150648394CB66BFE1236BF
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

540672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths