jaffacakes118_Trojan-Dropper[.]Win32[.]Demp[.]atfj[.]21ff1b6848be18650e12be2fd24dbbd5

General

Target
jaffacakes118_Trojan-Dropper.Win32.Demp.atfj.21ff1b6848be18650e12be2fd24dbbd5
Size 24KB
Sample261009-w2evqsdd65
SHA256 37fc55a5daeae6ac62babcf7af7b017df6316b09e95d3767d1e0babb48b57121
MD5 21ff1b6848be18650e12be2fd24dbbd5
SHA1 5e461b99c3e987e0e238922a0a58453297e263f3
SHA512 075e35b5f9165c6743b5b298ba68233cd0a8e0e0e7ab9fb96115d9e65016e98a0f1a72a939bf06b3894b435c846806180a6d3be6fcd8ac22b72e9be6db395fce
SSDEEP 768:r3cpN0u1np6SKCZDgMOV/okYvUQUQcnbcuyD7U:rMrJp6SKCZMMYokYchQcnouy8
TLSH
T1D4B2DFDE89398984C00E523B5B5998972C04AB1DBCC77FA26F84343FACD2F586975362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Demp.atfj.21ff1b6848be18650e12be2fd24dbbd5

jaffacakes118_Trojan-Dropper.Win32.Demp.atfj.21ff1b6848be18650e12be2fd24dbbd5

.exe 24KB

SHA256 37fc55a5daeae6ac62babcf7af7b017df6316b09e95d3767d1e0babb48b57121
MD5 21ff1b6848be18650e12be2fd24dbbd5
SHA1 5e461b99c3e987e0e238922a0a58453297e263f3
SHA512 075e35b5f9165c6743b5b298ba68233cd0a8e0e0e7ab9fb96115d9e65016e98a0f1a72a939bf06b3894b435c846806180a6d3be6fcd8ac22b72e9be6db395fce
SSDEEP 768:r3cpN0u1np6SKCZDgMOV/okYvUQUQcnbcuyD7U:rMrJp6SKCZMMYokYchQcnouy8
TLSH
T1D4B2DFDE89398984C00E523B5B5998972C04AB1DBCC77FA26F84343FACD2F586975362
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

45280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths