jaffacakes118_Trojan-Banker[.]Win32[.]Bancos[.]ha[.]bbfd97776a86036a1f5d940f977b801e

General

Target
jaffacakes118_Trojan-Banker.Win32.Bancos.ha.bbfd97776a86036a1f5d940f977b801e
Size 143KB
Sample261012-xyydcazsgv
SHA256 dc955b15b1cc33cac5d9cd043899327357d056c58787c9413388c668b2856280
MD5 bbfd97776a86036a1f5d940f977b801e
SHA1 b46cf73274cbcfdd0fee57715e1edadb0964d8a4
SHA512 cf0737d20746b1a41e48f0ef43c81110b27967b8f30bcd7e6d4486725cbe6b1686548ce9f620d37a71e52091e501bee1061ec9d64c001fce01b6b13990298e93
SSDEEP 3072:jerYhWKH+ApUJOCxm+KPCtmZG5exhuhz2D23TBOOJ0Cp:OYBHX2OHjzu8KPJ
TLSH
T135E31317263E4A8CC099A8B50E1AA63970B18D6F8BF19B3AC555109B4F70DCDBB18F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Banker.Win32.Bancos.ha.bbfd97776a86036a1f5d940f977b801e

jaffacakes118_Trojan-Banker.Win32.Bancos.ha.bbfd97776a86036a1f5d940f977b801e

.exe 143KB

IMPHASH 09d0478591d4f788cb3e5ea416c25237
SHA256 dc955b15b1cc33cac5d9cd043899327357d056c58787c9413388c668b2856280
MD5 bbfd97776a86036a1f5d940f977b801e
SHA1 b46cf73274cbcfdd0fee57715e1edadb0964d8a4
SHA512 cf0737d20746b1a41e48f0ef43c81110b27967b8f30bcd7e6d4486725cbe6b1686548ce9f620d37a71e52091e501bee1061ec9d64c001fce01b6b13990298e93
SSDEEP 3072:jerYhWKH+ApUJOCxm+KPCtmZG5exhuhz2D23TBOOJ0Cp:OYBHX2OHjzu8KPJ
TLSH
T135E31317263E4A8CC099A8B50E1AA63970B18D6F8BF19B3AC555109B4F70DCDBB18F0D
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1585152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths