jaffacakes118_Virus[.]Win32[.]Otwycal[.]a[.]55db9045aeb6f4d501b70fdc4624b649

General

Target
jaffacakes118_Virus.Win32.Otwycal.a.55db9045aeb6f4d501b70fdc4624b649
Size 107KB
Sample261015-2aenjset2m
SHA256 6cada2fa582684f7498888897320ae52fbfc1e6246c5fa9a8e5911e1035a5362
MD5 55db9045aeb6f4d501b70fdc4624b649
SHA1 d4f7e4bf47cb0b822aa48f7bfdfea8e9f53b8577
SHA512 0473eaad1c128be8fb056da2430f7fe0985535337f9ce1b440c5dbe50b45b1b2c3b11e15e3ddaca149b3c366e227708d9cc601c6472c8fa9938836a2cfe1b0e7
SSDEEP 3072:jwkeXTPbVI2qkmpctU52GT+9dvH1lJiDkFpofdH:iXj3QcbfbVlJiVV
TLSH
T1B5B3F1E69D64C4FBD80E10711021464073FFA7BA6E74428BF7DCA159B738A89EB3124B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Otwycal.a.55db9045aeb6f4d501b70fdc4624b649

jaffacakes118_Virus.Win32.Otwycal.a.55db9045aeb6f4d501b70fdc4624b649

.exe 107KB

IMPHASH 18842d719b3276439c3f30a230e56d2b
SHA256 6cada2fa582684f7498888897320ae52fbfc1e6246c5fa9a8e5911e1035a5362
MD5 55db9045aeb6f4d501b70fdc4624b649
SHA1 d4f7e4bf47cb0b822aa48f7bfdfea8e9f53b8577
SHA512 0473eaad1c128be8fb056da2430f7fe0985535337f9ce1b440c5dbe50b45b1b2c3b11e15e3ddaca149b3c366e227708d9cc601c6472c8fa9938836a2cfe1b0e7
SSDEEP 3072:jwkeXTPbVI2qkmpctU52GT+9dvH1lJiDkFpofdH:iXj3QcbfbVlJiVV
TLSH
T1B5B3F1E69D64C4FBD80E10711021464073FFA7BA6E74428BF7DCA159B738A89EB3124B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

40960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\BUILD_AREA\jdk6\control\build\windows-i586\tmp\sun\sun.rmi.registry\rmiregistry\obj\rmiregistry.pdb