jaffacakes118_Trojan[.]Win32[.]VBKrypt[.]wobs[.]e307303e2e1555ae8b94382062548ebb

General

Target
jaffacakes118_Trojan.Win32.VBKrypt.wobs.e307303e2e1555ae8b94382062548ebb
Size 220KB
Sample261014-mt2vvsby7k
SHA256 da9e31dd9a0e16b3480b96abea4b181ede240ab84c4427e101894fc3cab8f1b1
MD5 e307303e2e1555ae8b94382062548ebb
SHA1 6158b2a17570fa9f9418bdc9e1b004167c58f9de
SHA512 6f5628c83b438e7cdbf94e906672147505e8fe042759e49c7236c5248d6c93f11f990493f4c6c161a2ce97829e7908d4b649792151405a886a33657f7f2158fc
SSDEEP 3072:5G8MohYkQr0jeLwJr95lJowPkjQ8fiJNhYkQr0jeLwJr95b:XYQqLwhHlWwcjQgidYQqLwhH
TLSH
T12124CF9BF7509ED5C4C806708C92CFE26D66BC408E22C107B4B93E1F3D772A2A5597A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.VBKrypt.wobs.e307303e2e1555ae8b94382062548ebb

jaffacakes118_Trojan.Win32.VBKrypt.wobs.e307303e2e1555ae8b94382062548ebb

.exe 220KB

IMPHASH 4d06285e9612f0a1ce2785fe2d216b39
SHA256 da9e31dd9a0e16b3480b96abea4b181ede240ab84c4427e101894fc3cab8f1b1
MD5 e307303e2e1555ae8b94382062548ebb
SHA1 6158b2a17570fa9f9418bdc9e1b004167c58f9de
SHA512 6f5628c83b438e7cdbf94e906672147505e8fe042759e49c7236c5248d6c93f11f990493f4c6c161a2ce97829e7908d4b649792151405a886a33657f7f2158fc
SSDEEP 3072:5G8MohYkQr0jeLwJr95lJowPkjQ8fiJNhYkQr0jeLwJr95b:XYQqLwhHlWwcjQgidYQqLwhH
TLSH
T12124CF9BF7509ED5C4C806708C92CFE26D66BC408E22C107B4B93E1F3D772A2A5597A7
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4420

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths