jaffacakes118_Backdoor[.]Win32[.]Agobot[.]wc[.]f1acbae74505e7dc9fe7c7e87c62ad70

General

Target
jaffacakes118_Backdoor.Win32.Agobot.wc.f1acbae74505e7dc9fe7c7e87c62ad70
Size 119KB
Sample261011-yttp2agd77
SHA256 f68b267ac98b5ac2e7b87e9107056d0c14d6ca57a887d1a2e677a31245394345
MD5 f1acbae74505e7dc9fe7c7e87c62ad70
SHA1 6264dad7ae95690e4305bd6433c4ae8ab1cb7d1b
SHA512 290cfcb8093be2b7f29c262595268dafc98775d6233ab2884ef67fc71bbe286495c61ad723924f7f8297c76e72bbc2a2a45961545d3fd74e9ebf16ca82de9483
SSDEEP 3072:gB0kg0BfXm4v+RGUq+CyQvsL40WBwnSraOM5Tu6E:Cg6NTyQEL40WBJwT
TLSH
T13FC312A70CE74D2DCC33EA3E9D9997B61C2009B8D662393807D8E622D391D83359DC75
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Agobot.wc.f1acbae74505e7dc9fe7c7e87c62ad70

jaffacakes118_Backdoor.Win32.Agobot.wc.f1acbae74505e7dc9fe7c7e87c62ad70

.exe 119KB

IMPHASH 95dd8565ca0bfb2d2d6ae9b23740c4e0
SHA256 f68b267ac98b5ac2e7b87e9107056d0c14d6ca57a887d1a2e677a31245394345
MD5 f1acbae74505e7dc9fe7c7e87c62ad70
SHA1 6264dad7ae95690e4305bd6433c4ae8ab1cb7d1b
SHA512 290cfcb8093be2b7f29c262595268dafc98775d6233ab2884ef67fc71bbe286495c61ad723924f7f8297c76e72bbc2a2a45961545d3fd74e9ebf16ca82de9483
SSDEEP 3072:gB0kg0BfXm4v+RGUq+CyQvsL40WBwnSraOM5Tu6E:Cg6NTyQEL40WBJwT
TLSH
T13FC312A70CE74D2DCC33EA3E9D9997B61C2009B8D662393807D8E622D391D83359DC75
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

447829

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths