jaffacakes118_Backdoor[.]Win32[.]Ruskill[.]fwz[.]65ddfebc75bb1e81391e2b8dbcb36918

General

Target
jaffacakes118_Backdoor.Win32.Ruskill.fwz.65ddfebc75bb1e81391e2b8dbcb36918
Size 132KB
Sample261012-eyj7lsfe22
SHA256 a9395101f1587a91a1ac9dbea900b977585eba0ed4b32ac9accf2563be457b6f
MD5 65ddfebc75bb1e81391e2b8dbcb36918
SHA1 4893c88781d9e5a823e9ea807152af56a1102d4d
SHA512 620cdb678d17108b99875841b1a74a1a72ad5ee4931b83bdd5540f399e984c1e6fb78cc5519ec7a8df3968ff769dc021386dc51151f6f2894e501feeb5487822
SSDEEP 3072:ycmXDbS2Dtx1CUiIdMrDa0T/6lgwfJlb61tjR2:fmXDbSkrJWu0/SfD61tjR2
TLSH
T134D3D02BE6001D6AF028C9F09CD3D1E7114B2ECA4A5A5F1B23DD7BDD0A3E511A9E3D58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Ruskill.fwz.65ddfebc75bb1e81391e2b8dbcb36918

jaffacakes118_Backdoor.Win32.Ruskill.fwz.65ddfebc75bb1e81391e2b8dbcb36918

.exe 132KB

IMPHASH ef419e4afa21a981ba7e4ccb2968133a
SHA256 a9395101f1587a91a1ac9dbea900b977585eba0ed4b32ac9accf2563be457b6f
MD5 65ddfebc75bb1e81391e2b8dbcb36918
SHA1 4893c88781d9e5a823e9ea807152af56a1102d4d
SHA512 620cdb678d17108b99875841b1a74a1a72ad5ee4931b83bdd5540f399e984c1e6fb78cc5519ec7a8df3968ff769dc021386dc51151f6f2894e501feeb5487822
SSDEEP 3072:ycmXDbS2Dtx1CUiIdMrDa0T/6lgwfJlb61tjR2:fmXDbSkrJWu0/SfD61tjR2
TLSH
T134D3D02BE6001D6AF028C9F09CD3D1E7114B2ECA4A5A5F1B23DD7BDD0A3E511A9E3D58
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4964

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths