jaffacakes118_Backdoor[.]Win32[.]Rbot[.]gen[.]0894e5cc5edf7c90203bf38bdee1ae23

General

Target
jaffacakes118_Backdoor.Win32.Rbot.gen.0894e5cc5edf7c90203bf38bdee1ae23
Size 54KB
Sample261012-31ea5scy3j
SHA256 55653bf4c39f3008f3d75415ba401733a3c1824efd281741f88c8b5a64802b96
MD5 0894e5cc5edf7c90203bf38bdee1ae23
SHA1 df68cc8281521300ca24b6fb8ef37d2c52b44d06
SHA512 0193a1b64fd04adc9a7ef2fda036feced14f8729eed65ca33b75c020a3839b2f6fcefe7d65617dcd5560128cc8e20fcbb454e39c45c3e788ddbe2e787ef61ee5
SSDEEP 768:oSCXa5c7GQroUoDzLDhVI8E7niB3Np99xaXEu2Wrs15ZZAD0N8/p37E1dkIhpX:ZCnrI7Ynne998XEPWgo0N8/17E1Zn
TLSH
T17643F1CF18199EE4D9FD89F29AA8CAE4453CB2397BA5FC8FED4C34465AB78527121100
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Rbot.gen.0894e5cc5edf7c90203bf38bdee1ae23

jaffacakes118_Backdoor.Win32.Rbot.gen.0894e5cc5edf7c90203bf38bdee1ae23

.exe 54KB

IMPHASH 09d0478591d4f788cb3e5ea416c25237
SHA256 55653bf4c39f3008f3d75415ba401733a3c1824efd281741f88c8b5a64802b96
MD5 0894e5cc5edf7c90203bf38bdee1ae23
SHA1 df68cc8281521300ca24b6fb8ef37d2c52b44d06
SHA512 0193a1b64fd04adc9a7ef2fda036feced14f8729eed65ca33b75c020a3839b2f6fcefe7d65617dcd5560128cc8e20fcbb454e39c45c3e788ddbe2e787ef61ee5
SSDEEP 768:oSCXa5c7GQroUoDzLDhVI8E7niB3Np99xaXEu2Wrs15ZZAD0N8/p37E1dkIhpX:ZCnrI7Ynne998XEPWgo0N8/17E1Zn
TLSH
T17643F1CF18199EE4D9FD89F29AA8CAE4453CB2397BA5FC8FED4C34465AB78527121100
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

52276

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths