jaffacakes118_Trojan[.]Win32[.]VBKrypt[.]wobs[.]e9917a8daeb294eb401a1b96d7ae9f21

General

Target
jaffacakes118_Trojan.Win32.VBKrypt.wobs.e9917a8daeb294eb401a1b96d7ae9f21
Size 220KB
Sample261014-mt4pfszz2k
SHA256 10efc777a0ff41787d5fe69d7773e0e6965054ff6aca932e0242ec39144b94e7
MD5 e9917a8daeb294eb401a1b96d7ae9f21
SHA1 c0d347e70dd79941fb39fc68ba7193b9203e77de
SHA512 99787ee0f72aaca6c84818bda8f7e9d57804906d59b96ee467dfac08a527071d9bb6db93577c6c61073b14fba8f1be2d9de98f135579ac8c99fcea86796af1cd
SSDEEP 3072:nGVPohYkQr0jeLwJr95lJoafrjQMfiJNhYkQr0jeLwJr95b:JYQqLwhHlWaTjQwidYQqLwhH
TLSH
T14824BF9BF7509ED5C4C806B08D92CFE22D66BC408E22C11774B93E1F3D772A2A1587A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.VBKrypt.wobs.e9917a8daeb294eb401a1b96d7ae9f21

jaffacakes118_Trojan.Win32.VBKrypt.wobs.e9917a8daeb294eb401a1b96d7ae9f21

.exe 220KB

IMPHASH 4d06285e9612f0a1ce2785fe2d216b39
SHA256 10efc777a0ff41787d5fe69d7773e0e6965054ff6aca932e0242ec39144b94e7
MD5 e9917a8daeb294eb401a1b96d7ae9f21
SHA1 c0d347e70dd79941fb39fc68ba7193b9203e77de
SHA512 99787ee0f72aaca6c84818bda8f7e9d57804906d59b96ee467dfac08a527071d9bb6db93577c6c61073b14fba8f1be2d9de98f135579ac8c99fcea86796af1cd
SSDEEP 3072:nGVPohYkQr0jeLwJr95lJoafrjQMfiJNhYkQr0jeLwJr95b:JYQqLwhHlWaTjQwidYQqLwhH
TLSH
T14824BF9BF7509ED5C4C806B08D92CFE22D66BC408E22C11774B93E1F3D772A2A1587A7
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4420

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths