jaffacakes118_Backdoor[.]Win32[.]Aimbot[.]cv[.]6d46a6ccd94cde0129778f6bce9e91aa

General

Target
jaffacakes118_Backdoor.Win32.Aimbot.cv.6d46a6ccd94cde0129778f6bce9e91aa
Size 61KB
Sample261012-3vae1afe72
SHA256 e1c0f4e3434f46ee4af8ed2a6f3185fb495975038e7a56c668fd8131dce06bed
MD5 6d46a6ccd94cde0129778f6bce9e91aa
SHA1 317d6d71504c6d617b5a7f012f8d6e192a99ff88
SHA512 473a02448d66bb06004cc548a1bb86d8ac31bb16b27196ddbf8a8cd120a0a92d9a43300b8ee8081422f1aa349bd941306325d320613c81bb3fc72c0f2a9d2641
SSDEEP 1536:EmmZAfRinDLbkmtL9ytRfwwJZ0PyIR1A6CafkSjjGII:76AZut1u0PK6FcYS
TLSH
T1685301A372B43F43E944AC7FB7EF6C43582A80D3AC129A07B239061DD5DC6619D99A34
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Aimbot.cv.6d46a6ccd94cde0129778f6bce9e91aa

jaffacakes118_Backdoor.Win32.Aimbot.cv.6d46a6ccd94cde0129778f6bce9e91aa

.exe 61KB

SHA256 e1c0f4e3434f46ee4af8ed2a6f3185fb495975038e7a56c668fd8131dce06bed
MD5 6d46a6ccd94cde0129778f6bce9e91aa
SHA1 317d6d71504c6d617b5a7f012f8d6e192a99ff88
SHA512 473a02448d66bb06004cc548a1bb86d8ac31bb16b27196ddbf8a8cd120a0a92d9a43300b8ee8081422f1aa349bd941306325d320613c81bb3fc72c0f2a9d2641
SSDEEP 1536:EmmZAfRinDLbkmtL9ytRfwwJZ0PyIR1A6CafkSjjGII:76AZut1u0PK6FcYS
TLSH
T1685301A372B43F43E944AC7FB7EF6C43582A80D3AC129A07B239061DD5DC6619D99A34
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

540672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths