jaffacakes118_Worm[.]Win32[.]Socks[.]pgf[.]687b35dfcc982e27475121d88cd11b32

General

Target
jaffacakes118_Worm.Win32.Socks.pgf.687b35dfcc982e27475121d88cd11b32
Size 440KB
Sample261015-2ft1esdy7x
SHA256 f0af4c28fb149d690346c288e084b517565892f2e8249c9b1b8aa00293833849
MD5 687b35dfcc982e27475121d88cd11b32
SHA1 0e565ed9dd8c504c62595f4fd4931cb4aa744b77
SHA512 0114764bfcbe1289c63c2dfe1c20b62aceff18bd211daa0186aa38ed3fcc48bba35fce879525f30155f60da8fbb48e73f813ef0e9650c24a34f113aa5fa94bc4
SSDEEP 6144:uoK0zat8GzwzkIXXYnPYYoK0zaaoK0zat8GzwAlrhdMwPTBoK0zaOkIs8Gzn:vK0qjI4nA1K0OK0q2wPqK0AI2b
TLSH
T14DA40275F758AC60FA7B8973E1ACE526DD2CEC722F54F84BAA4C1A8532D1A87C413109
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Worm.Win32.Socks.pgf.687b35dfcc982e27475121d88cd11b32

SHA256 f0af4c28fb149d690346c288e084b517565892f2e8249c9b1b8aa00293833849
MD5 687b35dfcc982e27475121d88cd11b32
SHA1 0e565ed9dd8c504c62595f4fd4931cb4aa744b77
SHA512 0114764bfcbe1289c63c2dfe1c20b62aceff18bd211daa0186aa38ed3fcc48bba35fce879525f30155f60da8fbb48e73f813ef0e9650c24a34f113aa5fa94bc4
SSDEEP 6144:uoK0zat8GzwzkIXXYnPYYoK0zaaoK0zat8GzwAlrhdMwPTBoK0zaOkIs8Gzn:vK0qjI4nA1K0OK0q2wPqK0AI2b
TLSH
T14DA40275F758AC60FA7B8973E1ACE526DD2CEC722F54F84BAA4C1A8532D1A87C413109
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

140732

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths