jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]3c519ff362cfc199096cfd85ca2a2a8a

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.3c519ff362cfc199096cfd85ca2a2a8a
Size 196KB
Sample261014-cdm2naty8p
SHA256 dac78c880ee85205b860f005063bb8a8cc4371855ed4e45f7f47fda9e5bb7ae3
MD5 3c519ff362cfc199096cfd85ca2a2a8a
SHA1 952fd182de2b4e4a79c29228c7b441736e9afcda
SHA512 6061697c0023f095d670cebe8991d32559113d6e321a6864ee53e6af56bd63be742ebf928a7f6db04575ae160142bbdee0499866a463e41743c38127a16a4d29
SSDEEP 3072:46aAQw1H4kZdN9ffilSjRr3871TWpxdDmZxg0MtuZEQ+z:0AQw1YIX9fAStpbmfgfth
TLSH
T167146CADFF84CFE7CBBE03F8E8A2712447B9525B519AF74B044848E92A153C7C196193
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
sample	SmartAssembly

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.3c519ff362cfc199096cfd85ca2a2a8a

jaffacakes118_HEUR.Trojan.Win32.Generic.3c519ff362cfc199096cfd85ca2a2a8a

.exe 196KB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 dac78c880ee85205b860f005063bb8a8cc4371855ed4e45f7f47fda9e5bb7ae3
MD5 3c519ff362cfc199096cfd85ca2a2a8a
SHA1 952fd182de2b4e4a79c29228c7b441736e9afcda
SHA512 6061697c0023f095d670cebe8991d32559113d6e321a6864ee53e6af56bd63be742ebf928a7f6db04575ae160142bbdee0499866a463e41743c38127a16a4d29
SSDEEP 3072:46aAQw1H4kZdN9ffilSjRr3871TWpxdDmZxg0MtuZEQ+z:0AQw1YIX9fAStpbmfgfth
TLSH
T167146CADFF84CFE7CBBE03F8E8A2712447B9525B519AF74B044848E92A153C7C196193
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

126496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\$USER$\Desktop\ss.pdb