jaffacakes118_Worm[.]Win32[.]Warpigs[.]a[.]651351dc8b33a409f7d89e8d3830c1e2

General

Target
jaffacakes118_Worm.Win32.Warpigs.a.651351dc8b33a409f7d89e8d3830c1e2
Size 65KB
Sample261015-2g2fwset7k
SHA256 a259e72a817852a461fda613430854ce82361fcbae5f09bd333bf2fadfe93c17
MD5 651351dc8b33a409f7d89e8d3830c1e2
SHA1 d60213e6e99e442a88ee4b721a6d17775e583978
SHA512 f52c938098e98ed1a8ac8f4f952df9e838f8b884a20c726f75d99ad145e0a7c0fed8df138d7ce03412374896a00f6496f46deb96915e96b2a8645f59ec20ae1a
SSDEEP 1536:zggAun+P5x/1sofO3UlH9tsfOlaEm4mIPQ8rk9U56FlFG2:zgzh/mkLtsOl5mnIPQ8rk9J/FG2
TLSH
T16B63016ED54E0A21F482123213700F69DF24A5A91F71E189DE4ED3235435AE7BE48FE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Worm.Win32.Warpigs.a.651351dc8b33a409f7d89e8d3830c1e2

SHA256 a259e72a817852a461fda613430854ce82361fcbae5f09bd333bf2fadfe93c17
MD5 651351dc8b33a409f7d89e8d3830c1e2
SHA1 d60213e6e99e442a88ee4b721a6d17775e583978
SHA512 f52c938098e98ed1a8ac8f4f952df9e838f8b884a20c726f75d99ad145e0a7c0fed8df138d7ce03412374896a00f6496f46deb96915e96b2a8645f59ec20ae1a
SSDEEP 1536:zggAun+P5x/1sofO3UlH9tsfOlaEm4mIPQ8rk9U56FlFG2:zgzh/mkLtsOl5mnIPQ8rk9J/FG2
TLSH
T16B63016ED54E0A21F482123213700F69DF24A5A91F71E189DE4ED3235435AE7BE48FE7
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

372912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths