Overview

overview

10

Static

static

10

jaffacakes...ty.exe

windows10-2004-x64

10

jaffacakes...ty.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_Trojan.Win32.VBKryjetor.baty.70e12e745fbfe08a6fcbe155a2d1086c
  • Size 786KB
  • Sample261014-mrcsysbx41
  • SHA256 3cc0673a2dae097af0596df41724f6770be2e444bd9d98bb83b454075c4c8150
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
downloaderguloader

Malware Config

Signatures

  • Family: Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

    downloaderguloader
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • jaffacakes118_Trojan.Win32.VBKryjetor.baty.70e12e745fbfe08a6fcbe155a2d1086c
    .exe 786KB

jaffacakes118_Trojan.Win32.VBKryjetor.baty.70e12e745fbfe08a6fcbe155a2d1086c

  • IMPHASH 1715984864cfc00de42f497b47aeb1d7
  • SHA256 3cc0673a2dae097af0596df41724f6770be2e444bd9d98bb83b454075c4c8150
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:4windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
72:8d:03:a5:b2:a8:ad:bd:d3:92:a8:63:74:05:05:6c:14:37:59:83:45:b5:f9:2f:0c:ff:aa:a0:48:53:8b:7a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Foxit Corporation,O=Fotos_auf_CD_DVD_2018_Dlx_trial (en-US),C=DE
Minor OS version
0
Major OS version
4
Entry point
5612
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths