jaffacakes118_Worm[.]Win32[.]VBNA[.]b[.]28b9c99143af8ed880e59a909ea8df22

General

Target
jaffacakes118_Worm.Win32.VBNA.b.28b9c99143af8ed880e59a909ea8df22
Size 196KB
Sample261014-qde8psdv7v
SHA256 0294066657a09bdb419d6702168289115003691d4c64faf651b1f0a6f5e6618b
MD5 28b9c99143af8ed880e59a909ea8df22
SHA1 5bdf927e459b46818d76f86966058852725c796f
SHA512 e4d24ce3194ef3524cd092dc641973b6f89cc2f186707e9a1dc340429a4da7ad00a25a985b16a03700e99bcbb053e1ccfedb5ebbee443b1eb53dba4b05f7c571
SSDEEP 6144:Z48BGMTIqaGqqCG6K3SKderARZlKARUY0TV4P:6MiARiAR8TC
TLSH
T1E8143A1BB3460296D71A3A3129E7C6F227A378484F8B461B72B43F7A6C31D305E66717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Worm.Win32.VBNA.b.28b9c99143af8ed880e59a909ea8df22

SHA256 0294066657a09bdb419d6702168289115003691d4c64faf651b1f0a6f5e6618b
MD5 28b9c99143af8ed880e59a909ea8df22
SHA1 5bdf927e459b46818d76f86966058852725c796f
SHA512 e4d24ce3194ef3524cd092dc641973b6f89cc2f186707e9a1dc340429a4da7ad00a25a985b16a03700e99bcbb053e1ccfedb5ebbee443b1eb53dba4b05f7c571
SSDEEP 6144:Z48BGMTIqaGqqCG6K3SKderARZlKARUY0TV4P:6MiARiAR8TC
TLSH
T1E8143A1BB3460296D71A3A3129E7C6F227A378484F8B461B72B43F7A6C31D305E66717
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths