jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]0da13b97e948f7d02d974331beef21c1

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.0da13b97e948f7d02d974331beef21c1
Size 549KB
Sample261013-2ebsfsvsdv
SHA256 55ef1be8c7507ec7b321d62777777f634a1b5b0a82c562c010c4d402aa918bf6
MD5 0da13b97e948f7d02d974331beef21c1
SHA1 5d4b2c741dd20f49219c12ccd7b09cc066003d31
SHA512 71aa9eca48dbb1f71fe06702a5a14b9f191e7f6b9bdec1e38575248abf1664993a0754eab7580ca6926208bb389cb81efe8262ebf93689c9eb13bfa3dc119f8b
SSDEEP 6144:1K/1lRkOKIAy/WKmgizZbabRWQABqs8D9A/X7Q8Ip3LGHKtZuWAApup/s61bwPmO:1sXW7pa7AItDALmLGqt5+061bweMtqy
TLSH
T114C4F129B3C54FA2CF4F5B79E8816A549B3681565B99EB4F08840CDC2D363EBC08B5C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
sample	SmartAssembly

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.0da13b97e948f7d02d974331beef21c1

jaffacakes118_HEUR.Trojan.Win32.Generic.0da13b97e948f7d02d974331beef21c1

.exe 549KB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 55ef1be8c7507ec7b321d62777777f634a1b5b0a82c562c010c4d402aa918bf6
MD5 0da13b97e948f7d02d974331beef21c1
SHA1 5d4b2c741dd20f49219c12ccd7b09cc066003d31
SHA512 71aa9eca48dbb1f71fe06702a5a14b9f191e7f6b9bdec1e38575248abf1664993a0754eab7580ca6926208bb389cb81efe8262ebf93689c9eb13bfa3dc119f8b
SSDEEP 6144:1K/1lRkOKIAy/WKmgizZbabRWQABqs8D9A/X7Q8Ip3LGHKtZuWAApup/s61bwPmO:1sXW7pa7AItDALmLGqt5+061bweMtqy
TLSH
T114C4F129B3C54FA2CF4F5B79E8816A549B3681565B99EB4F08840CDC2D363EBC08B5C7
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

490292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths