jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]eddd3c35b7c02117382de2b84ed39d69

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.eddd3c35b7c02117382de2b84ed39d69
Size 488KB
Sample261009-vm6t8sch84
SHA256 27ec3de2994f570462609e613a674be2919da6ec9a61bee12daf792de6ac150d
MD5 eddd3c35b7c02117382de2b84ed39d69
SHA1 a90e90d2661c9a9cf1840dfb5ce0864fc701b09e
SHA512 dca5528a83aa8ce93c70e517895fe2c968178c6bf91f62e247fc53b94b7ef11e4521cf77d641e4ff4f2d137c4f064ebec7fe2a3335b1a609687e659b85e13fd7
SSDEEP 12288:uL2bvOWhmtwKYN0oeKP8lJLAOHk2Ob3BtiV6ImuvxB:oIvOqswp0oHElJLA93BtilRB
TLSH
T1E5B402EE9231D0BFF289487813227A51147A798438F56187731F1E6E8A93DD25FBD382
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.eddd3c35b7c02117382de2b84ed39d69

jaffacakes118_HEUR.Trojan.Win32.Generic.eddd3c35b7c02117382de2b84ed39d69

.exe 488KB

IMPHASH a03c3abad9b2f0054410931ec0f3e0f5
SHA256 27ec3de2994f570462609e613a674be2919da6ec9a61bee12daf792de6ac150d
MD5 eddd3c35b7c02117382de2b84ed39d69
SHA1 a90e90d2661c9a9cf1840dfb5ce0864fc701b09e
SHA512 dca5528a83aa8ce93c70e517895fe2c968178c6bf91f62e247fc53b94b7ef11e4521cf77d641e4ff4f2d137c4f064ebec7fe2a3335b1a609687e659b85e13fd7
SSDEEP 12288:uL2bvOWhmtwKYN0oeKP8lJLAOHk2Ob3BtiV6ImuvxB:oIvOqswp0oHElJLA93BtilRB
TLSH
T1E5B402EE9231D0BFF289487813227A51147A798438F56187731F1E6E8A93DD25FBD382
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

10494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\dev\打包工具\core\Release\shell1.pdb