jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]27172ff339fa6887abd01f9b4e52649f

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.27172ff339fa6887abd01f9b4e52649f
Size 463KB
Sample261014-annd3awsbt
SHA256 30de535ea85d86f148a80250fbf16cc6bef36c429fe7aaeb28358f5d550270d0
MD5 27172ff339fa6887abd01f9b4e52649f
SHA1 f361605889677a08b82c9f795664f3c759bd1800
SHA512 642de26a0427599725535194bfff325ad57da4b501becbb90bf14dd0dc7595932073e1ad4288e0c1b96365198faa045053fdbd8e3a5d7f705d670ab66c30fd84
SSDEEP 6144:zs1t//IufaVtHhDn2yBsl2YqICCc5epLCRojxtXPZdw5qYCV6pCys0wjgO7WMIYI:6w/hdBsl269peajvjwEY3px8aM4
TLSH
T163A4E000B6E1C536E033B170297A80B14E78BE75473E16C7B3885A6F5E312D2DA6976F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.27172ff339fa6887abd01f9b4e52649f

jaffacakes118_HEUR.Trojan.Win32.Generic.27172ff339fa6887abd01f9b4e52649f

.exe 463KB

SHA256 30de535ea85d86f148a80250fbf16cc6bef36c429fe7aaeb28358f5d550270d0
MD5 27172ff339fa6887abd01f9b4e52649f
SHA1 f361605889677a08b82c9f795664f3c759bd1800
SHA512 642de26a0427599725535194bfff325ad57da4b501becbb90bf14dd0dc7595932073e1ad4288e0c1b96365198faa045053fdbd8e3a5d7f705d670ab66c30fd84
SSDEEP 6144:zs1t//IufaVtHhDn2yBsl2YqICCc5epLCRojxtXPZdw5qYCV6pCys0wjgO7WMIYI:6w/hdBsl269peajvjwEY3px8aM4
TLSH
T163A4E000B6E1C536E033B170297A80B14E78BE75473E16C7B3885A6F5E312D2DA6976F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

44106

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths