jaffacakes118_Backdoor[.]Win32[.]Rbot[.]aqo[.]f1c11bdceb164ccf643b6ff3714f2f18

General

Target
jaffacakes118_Backdoor.Win32.Rbot.aqo.f1c11bdceb164ccf643b6ff3714f2f18
Size 105KB
Sample261014-gtmhaagw21
SHA256 ab9c2e08134b50269992333f48d7a6a11db9ac63af64d4683fbf37f4608f8205
MD5 f1c11bdceb164ccf643b6ff3714f2f18
SHA1 c12c58e9923031705327d1b3039f265de30701f4
SHA512 23d02d1140808ae4357dce73d8f767e58238e392531c572c40ea16401fac22c4fa4dae1dae5a8866a3953687eb463af19327556968f169d9b7b278c911241b52
SSDEEP 3072:hqaAuy7lVBag3R3Qgl0qAKbnOqp+gnMudjK9:5uaaEqpt4
TLSH
T199B312AD4B415BF7F96B443C558231CFCB04C3AB6BCDA2B92C64958858F35009E9FA72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Rbot.aqo.f1c11bdceb164ccf643b6ff3714f2f18

jaffacakes118_Backdoor.Win32.Rbot.aqo.f1c11bdceb164ccf643b6ff3714f2f18

.exe 105KB

SHA256 ab9c2e08134b50269992333f48d7a6a11db9ac63af64d4683fbf37f4608f8205
MD5 f1c11bdceb164ccf643b6ff3714f2f18
SHA1 c12c58e9923031705327d1b3039f265de30701f4
SHA512 23d02d1140808ae4357dce73d8f767e58238e392531c572c40ea16401fac22c4fa4dae1dae5a8866a3953687eb463af19327556968f169d9b7b278c911241b52
SSDEEP 3072:hqaAuy7lVBag3R3Qgl0qAKbnOqp+gnMudjK9:5uaaEqpt4
TLSH
T199B312AD4B415BF7F96B443C558231CFCB04C3AB6BCDA2B92C64958858F35009E9FA72
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

516192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths