jaffacakes118_Virus[.]Win32[.]Sality[.]gen[.]24b3a94c9a9202e6c6d9cfa607d4b05c

General

Target
jaffacakes118_Virus.Win32.Sality.gen.24b3a94c9a9202e6c6d9cfa607d4b05c
Size 298KB
Sample261014-prxt8svxev
SHA256 9eb937e4a3faa7c29e8cc85118a5c87d65f8716c89e5d1b13d7d7bc334ec8975
MD5 24b3a94c9a9202e6c6d9cfa607d4b05c
SHA1 0205f0346068169ab2fae60de0826deafbdc2ee3
SHA512 1593f7272201ea935f3930ae6921fac01a85f1b66580c3419b074d8d40c1815c43c3c79ad8a65b1b087b924e3f9b5562e2b36fd9998158b51631e7b0504590d2
SSDEEP 6144:0bIqwE8rg6+m+cCLClEEzQBOTesok+wFx:kIqmgaDFKO6sFTF
TLSH
T1AD54B04673A8CF92C74E4FBCD5D292249771945B23B9F37A098435E838123ABDF85893
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

SmartAssembly .NET packer 1 IoCs

Detects SmartAssembly .NET packer.

resource	yara_rule
sample	SmartAssembly

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Sality.gen.24b3a94c9a9202e6c6d9cfa607d4b05c

jaffacakes118_Virus.Win32.Sality.gen.24b3a94c9a9202e6c6d9cfa607d4b05c

.exe 298KB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9eb937e4a3faa7c29e8cc85118a5c87d65f8716c89e5d1b13d7d7bc334ec8975
MD5 24b3a94c9a9202e6c6d9cfa607d4b05c
SHA1 0205f0346068169ab2fae60de0826deafbdc2ee3
SHA512 1593f7272201ea935f3930ae6921fac01a85f1b66580c3419b074d8d40c1815c43c3c79ad8a65b1b087b924e3f9b5562e2b36fd9998158b51631e7b0504590d2
SSDEEP 6144:0bIqwE8rg6+m+cCLClEEzQBOTesok+wFx:kIqmgaDFKO6sFTF
TLSH
T1AD54B04673A8CF92C74E4FBCD5D292249771945B23B9F37A098435E838123ABDF85893
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

248082

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths