jaffacakes118_Trojan-Dropper[.]Win32[.]Binder[.]rz[.]958a3a60ac242b8d36244df7557c878e

General

Target
jaffacakes118_Trojan-Dropper.Win32.Binder.rz.958a3a60ac242b8d36244df7557c878e
Size 223KB
Sample261009-v55d5act21
SHA256 27c39173c5519fad0183314eba705d3b70c3174d8f996e5424745b6ed13a3ac5
MD5 958a3a60ac242b8d36244df7557c878e
SHA1 e6e10f6eafa3ad32269cf6b0e2af21d7ebd381cf
SHA512 49d22b9411759fe84bbfa93d4f8a887f40482e2b805f2a0923d5e6f84b626e404eb75f34df9f78f41d1d7bee90794d4f5db49e554b87883c91084fe696f2c948
SSDEEP 6144:RAzSyL/SIOGBQlNlCR5hz3e8b/bB8XN5LjaXnOeF:9Qjix6hh/bB+mOe
TLSH
T184242205CAD906FFF6C701BE8037AF00C6FB383F565B99A5B46AA0D419613612E36B35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Binder.rz.958a3a60ac242b8d36244df7557c878e

jaffacakes118_Trojan-Dropper.Win32.Binder.rz.958a3a60ac242b8d36244df7557c878e

.exe 223KB

IMPHASH 647b2d25b4821905b4195ff7a6455b54
SHA256 27c39173c5519fad0183314eba705d3b70c3174d8f996e5424745b6ed13a3ac5
MD5 958a3a60ac242b8d36244df7557c878e
SHA1 e6e10f6eafa3ad32269cf6b0e2af21d7ebd381cf
SHA512 49d22b9411759fe84bbfa93d4f8a887f40482e2b805f2a0923d5e6f84b626e404eb75f34df9f78f41d1d7bee90794d4f5db49e554b87883c91084fe696f2c948
SSDEEP 6144:RAzSyL/SIOGBQlNlCR5hz3e8b/bB8XN5LjaXnOeF:9Qjix6hh/bB+mOe
TLSH
T184242205CAD906FFF6C701BE8037AF00C6FB383F565B99A5B46AA0D419613612E36B35
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

615808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths