jaffacakes118_Trojan[.]Win32[.]VBKrypt[.]tglw[.]135d76fac1a5607b728fcdcb16861fb6

General

Target
jaffacakes118_Trojan.Win32.VBKrypt.tglw.135d76fac1a5607b728fcdcb16861fb6
Size 18KB
Sample261014-msyf2sttcs
SHA256 bbe2b864546bda1ae8c9f270a16cea69fdd01edb256b3bcc8ad8baf79f0f766c
MD5 135d76fac1a5607b728fcdcb16861fb6
SHA1 08648dcfd58640195bd3f8211293d70c66be69b9
SHA512 bcd286fcc89e4ebd9194fe3189e8bb1ed87efd12c8a30fcd6838db7150f883f209bf449a15467e6795a091b4c1288c3b71b07ca4c58c24696ad3ee05c5a8c250
SSDEEP 384:FKVF9dkF9/hGDaU38GcBibHEl4wCxnMR03qS6mG07W:kVlkF9/oD78Cgl4wCxnVqS3Y
TLSH
T15482BFA266AC6E5BDDD3047687B7EF9A3A192CBC491673C303DCAB3D5835E500D12811
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.VBKrypt.tglw.135d76fac1a5607b728fcdcb16861fb6

jaffacakes118_Trojan.Win32.VBKrypt.tglw.135d76fac1a5607b728fcdcb16861fb6

.exe 18KB

SHA256 bbe2b864546bda1ae8c9f270a16cea69fdd01edb256b3bcc8ad8baf79f0f766c
MD5 135d76fac1a5607b728fcdcb16861fb6
SHA1 08648dcfd58640195bd3f8211293d70c66be69b9
SHA512 bcd286fcc89e4ebd9194fe3189e8bb1ed87efd12c8a30fcd6838db7150f883f209bf449a15467e6795a091b4c1288c3b71b07ca4c58c24696ad3ee05c5a8c250
SSDEEP 384:FKVF9dkF9/hGDaU38GcBibHEl4wCxnMR03qS6mG07W:kVlkF9/oD78Cgl4wCxnVqS3Y
TLSH
T15482BFA266AC6E5BDDD3047687B7EF9A3A192CBC491673C303DCAB3D5835E500D12811
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

73728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths