jaffacakes118_Trojan-Spy[.]Win32[.]Orcus[.]ns[.]69583f1d0cfb19e4bedd22fd22ce1db1

General

Target
jaffacakes118_Trojan-Spy.Win32.Orcus.ns.69583f1d0cfb19e4bedd22fd22ce1db1
Size 944KB
Sample261012-d698bsvx3q
SHA256 58213f82a17b7194612c4482e115fdf527929a70e616a8def14d479ca3550254
MD5 69583f1d0cfb19e4bedd22fd22ce1db1
SHA1 3b74f3ecf5f9debb9aeecbe40cdfad8b4dccf198
SHA512 ea1b67f450f67c22af52ea22470c14f0aa3b2e61a5a184038eeffd8c6a5c16c547eb6717fab5d7d72b5e71a250f27cd030031dfcbdcbfc32634a9d55ed8dee73
SSDEEP 24576:5T0BbkM6qsR2Lve1oljxXyhy57mVUPDMj0i0EJy2dfcD1Fd:5T0BbkM6x2S1GXyQ57mr0l2FKbd
TLSH
T1942533C2F0432723119B08A0F74DAD56B08C107E3FD3D5962A426BAD21EF4BE5BB6D58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SKMBT-5069654-0394650039-9959594594.exe

jaffacakes118_Trojan-Spy.Win32.Orcus.ns.69583f1d0cfb19e4bedd22fd22ce1db1

.zip 944KB
SKMBT-5069654-0394650039-9959594594.exe

.exe 1.5MB

SHA256 58213f82a17b7194612c4482e115fdf527929a70e616a8def14d479ca3550254
MD5 69583f1d0cfb19e4bedd22fd22ce1db1
SHA1 3b74f3ecf5f9debb9aeecbe40cdfad8b4dccf198
SHA512 ea1b67f450f67c22af52ea22470c14f0aa3b2e61a5a184038eeffd8c6a5c16c547eb6717fab5d7d72b5e71a250f27cd030031dfcbdcbfc32634a9d55ed8dee73
SSDEEP 24576:5T0BbkM6qsR2Lve1oljxXyhy57mVUPDMj0i0EJy2dfcD1Fd:5T0BbkM6x2S1GXyQ57mr0l2FKbd
TLSH
T1942533C2F0432723119B08A0F74DAD56B08C107E3FD3D5962A426BAD21EF4BE5BB6D58
MD5 SHA1 SHA512 SSDEEP TLSH

IMPHASH d7a09a87af4b33f16ffe4aef4d4a1a82
SHA256 2021b82ce02867da4644bd875006f3ed53a5778cdaf9ec928eddff1023a19108
MD5 1d8e21cbc85bb063e1f49402fc5d5e2f
SHA1 56102e6737740291b6ba75c23ebab675a2b552ea
SHA512 e0d6f78abaf252cfcff944e2db807db739021f82b2bbf4a0fb3a2a28473552ffcf7ed8147c0ad1aa02b41dd5a4d262d3ab6697c90c472c512c02ed10b47dbb32
SSDEEP 24576:VgLVJEPkSCF0vY29Jz5+72uDZwaD/4b8a9T4RBjJoU:2YPkeY2Tz5+72QZwkU8a9T4JoU
TLSH
T15A65E1FBA09C3B82FC0C80355D7865A08B9DA9364645CD4A4568DAD8F6F2A47F32DF13
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths