jaffacakes118_Trojan-Dropper[.]Win32[.]Flystud[.]ko[.]1dc0e2bbf1565175fcec2c2890730d33

General

Target
jaffacakes118_Trojan-Dropper.Win32.Flystud.ko.1dc0e2bbf1565175fcec2c2890730d33
Size 2.3MB
Sample261009-xclsesdf79
SHA256 5e75005048f714adca54ecf9e95f9b9c7a4831c9812ec1f1bf3a59180350c73c
MD5 1dc0e2bbf1565175fcec2c2890730d33
SHA1 3b7eaf21aaf2112e0ec5940cc5a69cc6197d6835
SHA512 acbc0fd8b5f8e4dcd41a9e3b98389a459cc640d3bc79019a36429a4cb1b4392bd4a4acabfa0a0bdb9fbe54445c5faca85123802aba836b91696da99c766f0258
SSDEEP 49152:bKQm64k1bP+SOVAmDXvQ9V6hdVF5U7/HQ5d:bKr6dkVAmDXvdZu7e
TLSH
T157B5D1D36CB59168C26E92709306B0A44CD86218CE433C61B57BFDF876BB5C5887DA8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Dropper.Win32.Flystud.ko.1dc0e2bbf1565175fcec2c2890730d33

jaffacakes118_Trojan-Dropper.Win32.Flystud.ko.1dc0e2bbf1565175fcec2c2890730d33

.exe 2.3MB

IMPHASH 9165ea3e914e03bda3346f13edbd6ccd
SHA256 5e75005048f714adca54ecf9e95f9b9c7a4831c9812ec1f1bf3a59180350c73c
MD5 1dc0e2bbf1565175fcec2c2890730d33
SHA1 3b7eaf21aaf2112e0ec5940cc5a69cc6197d6835
SHA512 acbc0fd8b5f8e4dcd41a9e3b98389a459cc640d3bc79019a36429a4cb1b4392bd4a4acabfa0a0bdb9fbe54445c5faca85123802aba836b91696da99c766f0258
SSDEEP 49152:bKQm64k1bP+SOVAmDXvQ9V6hdVF5U7/HQ5d:bKr6dkVAmDXvdZu7e
TLSH
T157B5D1D36CB59168C26E92709306B0A44CD86218CE433C61B57BFDF876BB5C5887DA8F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths