jaffacakes118_Worm[.]Win32[.]Agent[.]cp[.]66958b9ca80a3e17ad4bf

General

Target
jaffacakes118_Worm.Win32.Agent.cp.66958b9ca80a3e17ad4bf
Size 1.0MB
Sample261012-1ephwaxv8j
SHA256 39fdbda0cdbf1d678126ab1ef00ac0e4514344d9a233ffae795ad775e0ba72fd
MD5 0d763b1a52566958b9ca80a3e17ad4bf
SHA1 d82afeec2c5366491584dc278507526324f28e03
SHA512 aa7cbe20bf4e18bd419745efeea97632ef0e872324fcf18c60f4deee9ed72457548068153305b7026de2eb397a515f1f4c2ba199df8b137f8755036c45fcc7b3
SSDEEP 24576:ZTEt7uw1/WUbrJof7v5KmP2TcQQz/KLkFrW2vNZpyGEk/6vq2jel:ZEduw1+Ub6Tvr3bDFrW+Zpy0SvqIE
TLSH
T1943533D2456AA84ADF3859BB2F39CC81533BD58E3BB2C2C0379D787A6342E551F421C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Worm.Win32.Agent.cp.66958b9ca80a3e17ad4bf

SHA256 39fdbda0cdbf1d678126ab1ef00ac0e4514344d9a233ffae795ad775e0ba72fd
MD5 0d763b1a52566958b9ca80a3e17ad4bf
SHA1 d82afeec2c5366491584dc278507526324f28e03
SHA512 aa7cbe20bf4e18bd419745efeea97632ef0e872324fcf18c60f4deee9ed72457548068153305b7026de2eb397a515f1f4c2ba199df8b137f8755036c45fcc7b3
SSDEEP 24576:ZTEt7uw1/WUbrJof7v5KmP2TcQQz/KLkFrW2vNZpyGEk/6vq2jel:ZEduw1+Ub6Tvr3bDFrW+Zpy0SvqIE
TLSH
T1943533D2456AA84ADF3859BB2F39CC81533BD58E3BB2C2C0379D787A6342E551F421C2
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

105216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths