jaffacakes118_Backdoor[.]Win32[.]IRCBot[.]qu[.]fb276d702e41ce199bf1e91111ff7d4d

General

Target
jaffacakes118_Backdoor.Win32.IRCBot.qu.fb276d702e41ce199bf1e91111ff7d4d
Size 61KB
Sample261012-3y5ejshv21
SHA256 63d971a9e231f480b736e89210e821151b8df1b1218f12d1b1797bca0db4e6ec
MD5 fb276d702e41ce199bf1e91111ff7d4d
SHA1 4ecd47aad52e555d527ac487cbb9db40d15cab8d
SHA512 d69044785044e70e22600397a8849ca1bdc421e947cc71356e4f83bccb46994f383096273497f20f1d1758e3e2c8f0667c9562866eec35184c524743358850b6
SSDEEP 1536:Z2GSIxtA5GdBDM+Z0f+Y0xgcaDqv3Ihbgl73AiG8sXa1+V:oaAEdNtSfEv4hZtvaw
TLSH
T1BF53029E414FE38AF98F86F5111A823CF754BA6F90C792367E61C9D33982729850F990
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.IRCBot.qu.fb276d702e41ce199bf1e91111ff7d4d

jaffacakes118_Backdoor.Win32.IRCBot.qu.fb276d702e41ce199bf1e91111ff7d4d

.exe 61KB

IMPHASH bd51a645a9c68bd03b2e51586e5cbdcb
SHA256 63d971a9e231f480b736e89210e821151b8df1b1218f12d1b1797bca0db4e6ec
MD5 fb276d702e41ce199bf1e91111ff7d4d
SHA1 4ecd47aad52e555d527ac487cbb9db40d15cab8d
SHA512 d69044785044e70e22600397a8849ca1bdc421e947cc71356e4f83bccb46994f383096273497f20f1d1758e3e2c8f0667c9562866eec35184c524743358850b6
SSDEEP 1536:Z2GSIxtA5GdBDM+Z0f+Y0xgcaDqv3Ihbgl73AiG8sXa1+V:oaAEdNtSfEv4hZtvaw
TLSH
T1BF53029E414FE38AF98F86F5111A823CF754BA6F90C792367E61C9D33982729850F990
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5793

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths