jaffacakes118_Trojan-Dropper[.]Win32[.]Dinwod[.]rmo[.]0319a2538eaffda55890e5441cd28c6c

General

Target
jaffacakes118_Trojan-Dropper.Win32.Dinwod.rmo.0319a2538eaffda55890e5441cd28c6c
Size 38KB
Sample261009-w36d3sssdx
SHA256 49e0f036155539545925dbf0a63d08f8e063ca560451fe586dc7256bb29b3505
MD5 0319a2538eaffda55890e5441cd28c6c
SHA1 66555902dab3ec4f86259500ebe9d7153ab6343e
SHA512 9a9885c7f99d19fb647358c59f58e4d4a3e0adf6164fc4b4fa0c0de792117200ca9e287c81c6d3a83a61c59347a3f7efd0957945a5bf6441c6df1385127abbed
SSDEEP 768:L+2rEwHSSUL8tl5BEarQykeG66X9tPH/npvWMTCFqP1qIOR5ilII1kzMiFQF4DEi:ZrZyVX9t3pvWMTCwwjilIvXQF4DEc+je
TLSH
T1C3036423D510A4A1E12912B627B7072CE9708FB12AB14657EFD4BDF06EB67329E47D0C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Dinwod.rmo.0319a2538eaffda55890e5441cd28c6c

jaffacakes118_Trojan-Dropper.Win32.Dinwod.rmo.0319a2538eaffda55890e5441cd28c6c

.exe 38KB

IMPHASH ae0a5112fe1176f4e5f6e1bc95e4c209
SHA256 49e0f036155539545925dbf0a63d08f8e063ca560451fe586dc7256bb29b3505
MD5 0319a2538eaffda55890e5441cd28c6c
SHA1 66555902dab3ec4f86259500ebe9d7153ab6343e
SHA512 9a9885c7f99d19fb647358c59f58e4d4a3e0adf6164fc4b4fa0c0de792117200ca9e287c81c6d3a83a61c59347a3f7efd0957945a5bf6441c6df1385127abbed
SSDEEP 768:L+2rEwHSSUL8tl5BEarQykeG66X9tPH/npvWMTCFqP1qIOR5ilII1kzMiFQF4DEi:ZrZyVX9t3pvWMTCwwjilIvXQF4DEc+je
TLSH
T1C3036423D510A4A1E12912B627B7072CE9708FB12AB14657EFD4BDF06EB67329E47D0C
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths