jaffacakes118_Backdoor[.]Win32[.]Rbot[.]gen[.]862bc726810392bfe827f41823482d37

General

Target
jaffacakes118_Backdoor.Win32.Rbot.gen.862bc726810392bfe827f41823482d37
Size 51KB
Sample261009-tm2d3szvbz
SHA256 92ae6b6011faaa78cbc29dded6eed087bc10b160ce994a813eafeacbbf12c568
MD5 862bc726810392bfe827f41823482d37
SHA1 434960f302113a9014ce968d84bb6a5dd3bc5cb9
SHA512 72ad8f8f1aefc4c54820a3e81055d612064b60d0303179b87daf3846ed7add88de69c64df3454cb8be9a2fb68d3faaed0a81d46537224713b1a1263eb0019bc2
SSDEEP 1536:djDGo+X+Ew9uW1GyKFgrxK3715lWL6L4:dyoQ+E0ON1mLU
TLSH
T1CD33F1B54FC67CC7DEC5C2B9180752687C607BB3D246689E354F41A9EECD2A807EB082
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Rbot.gen.862bc726810392bfe827f41823482d37

jaffacakes118_Backdoor.Win32.Rbot.gen.862bc726810392bfe827f41823482d37

.exe 51KB

IMPHASH 7a7803027531302026dedc7b5f6025f2
SHA256 92ae6b6011faaa78cbc29dded6eed087bc10b160ce994a813eafeacbbf12c568
MD5 862bc726810392bfe827f41823482d37
SHA1 434960f302113a9014ce968d84bb6a5dd3bc5cb9
SHA512 72ad8f8f1aefc4c54820a3e81055d612064b60d0303179b87daf3846ed7add88de69c64df3454cb8be9a2fb68d3faaed0a81d46537224713b1a1263eb0019bc2
SSDEEP 1536:djDGo+X+Ew9uW1GyKFgrxK3715lWL6L4:dyoQ+E0ON1mLU
TLSH
T1CD33F1B54FC67CC7DEC5C2B9180752687C607BB3D246689E354F41A9EECD2A807EB082
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

307200

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths