jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]4e9264b6c1fb8a6a0086e1c691005cfb

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.4e9264b6c1fb8a6a0086e1c691005cfb
Size 220KB
Sample261014-dmaclaxxcx
SHA256 72885214e4584022470ca0f2e2cadd30adf5195aa9d7c378eed9a3dfdc72173f
MD5 4e9264b6c1fb8a6a0086e1c691005cfb
SHA1 0f9c65b69906583d6813444e6d67f6403a6b0f8a
SHA512 23a337ddee201e37389e098106f16f78ab737cf89bb2ce7dcec9b6d27bc93788aa175d4b3e20429378886c4fa04d35ae2240547136aa3ef5da98c0a685c18607
SSDEEP 3072:Fbb3CyrmZ5m9Gi0GKLFid4wE6yYlco/HJgaEiFSwZ4xVphogkjKD+n6FF2fcRmTy:FbjCh5m9G2ZrSwZ4xVpho/2D+nKPabb
TLSH
T1F9248E9673D9DFD2C39E8BF890DA91249374E4479375F31E4A4C14D8282A3E3E9866C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
sample	SmartAssembly

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.4e9264b6c1fb8a6a0086e1c691005cfb

jaffacakes118_HEUR.Trojan.Win32.Generic.4e9264b6c1fb8a6a0086e1c691005cfb

.exe 220KB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 72885214e4584022470ca0f2e2cadd30adf5195aa9d7c378eed9a3dfdc72173f
MD5 4e9264b6c1fb8a6a0086e1c691005cfb
SHA1 0f9c65b69906583d6813444e6d67f6403a6b0f8a
SHA512 23a337ddee201e37389e098106f16f78ab737cf89bb2ce7dcec9b6d27bc93788aa175d4b3e20429378886c4fa04d35ae2240547136aa3ef5da98c0a685c18607
SSDEEP 3072:Fbb3CyrmZ5m9Gi0GKLFid4wE6yYlco/HJgaEiFSwZ4xVphogkjKD+n6FF2fcRmTy:FbjCh5m9G2ZrSwZ4xVpho/2D+nKPabb
TLSH
T1F9248E9673D9DFD2C39E8BF890DA91249374E4479375F31E4A4C14D8282A3E3E9866C3
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

146400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Documents and Settings\XPPRESP3\Desktop\sara.pdb