jaffacakes118_Trojan-Dropper[.]Win32[.]Demp[.]rdv[.]8cbdef7b28ab173f751d1ec9dec5396c

General

Target
jaffacakes118_Trojan-Dropper.Win32.Demp.rdv.8cbdef7b28ab173f751d1ec9dec5396c
Size 40KB
Sample261009-w2ws9add76
SHA256 5752acb9ad0b12d2b2a6b98b83bd1e52b19cf2a1208827428fc3288156432649
MD5 8cbdef7b28ab173f751d1ec9dec5396c
SHA1 e65e5281c97e32f9677a40b35034c53dec1a0bdd
SHA512 cd59bc7e6a82574917f6f9d04408c8bde9fe901281c87515f2fcafe61125811c0c1d0848ad99958865a416c1322f0fdbee64206c3fdc53e28ba673139584af78
SSDEEP 768:LEYQabRM+2D8/w6Q7hBSX9KhV1MSQCZudAaCUDYvXjDTK//4x8lha5:LE3abRV5Il7DZhV+hCZhLvvTKnLr
TLSH
T18C03E1A56F1945B3C5CB9DB3147E3A175B3BB5618233460782A8905F1C036FCCA7D2E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Demp.rdv.8cbdef7b28ab173f751d1ec9dec5396c

jaffacakes118_Trojan-Dropper.Win32.Demp.rdv.8cbdef7b28ab173f751d1ec9dec5396c

.exe 40KB

SHA256 5752acb9ad0b12d2b2a6b98b83bd1e52b19cf2a1208827428fc3288156432649
MD5 8cbdef7b28ab173f751d1ec9dec5396c
SHA1 e65e5281c97e32f9677a40b35034c53dec1a0bdd
SHA512 cd59bc7e6a82574917f6f9d04408c8bde9fe901281c87515f2fcafe61125811c0c1d0848ad99958865a416c1322f0fdbee64206c3fdc53e28ba673139584af78
SSDEEP 768:LEYQabRM+2D8/w6Q7hBSX9KhV1MSQCZudAaCUDYvXjDTK//4x8lha5:LE3abRV5Il7DZhV+hCZhLvvTKnLr
TLSH
T18C03E1A56F1945B3C5CB9DB3147E3A175B3BB5618233460782A8905F1C036FCCA7D2E6
MD5 SHA1 SHA512 SSDEEP TLSH

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

131073

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths