jaffacakes118_Trojan[.]Win32[.]Agent[.]qwiemo[.]3d263a1246dc80e307d3c78a43e35c0b

General

Target
jaffacakes118_Trojan.Win32.Agent.qwiemo.3d263a1246dc80e307d3c78a43e35c0b
Size 352KB
Sample261015-3f73qaes6w
SHA256 4d8f995593256261915f38dfa327cdee886c719e4b232d0133e414419e76cdcd
MD5 3d263a1246dc80e307d3c78a43e35c0b
SHA1 5a77d4db15355de4069b079606ed0ac1c149f14a
SHA512 135a69df5483c87ac429422e396bb5bcf387e08602af35de2c5aa06462fbc5fd73d51b1a65983d3053ba333c68ccff37764a7e40997206f3738ba9f228a62812
SSDEEP 6144:E0B+gzgxSsnDSQNbzf6Wdgn87QBPvpCjcPqdPRjQbNGhXEwTZdq+gu0:VgxHHNv487QBPsTpjQAhX9d
TLSH
T14D74E0A1B3452F9ADD60A2B1FE164112D2A2BE740090533765B2765F77B3AF400B73AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Agent.qwiemo.3d263a1246dc80e307d3c78a43e35c0b

jaffacakes118_Trojan.Win32.Agent.qwiemo.3d263a1246dc80e307d3c78a43e35c0b

.exe 352KB

IMPHASH eeb3e31734286c51031ab36c63147163
SHA256 4d8f995593256261915f38dfa327cdee886c719e4b232d0133e414419e76cdcd
MD5 3d263a1246dc80e307d3c78a43e35c0b
SHA1 5a77d4db15355de4069b079606ed0ac1c149f14a
SHA512 135a69df5483c87ac429422e396bb5bcf387e08602af35de2c5aa06462fbc5fd73d51b1a65983d3053ba333c68ccff37764a7e40997206f3738ba9f228a62812
SSDEEP 6144:E0B+gzgxSsnDSQNbzf6Wdgn87QBPvpCjcPqdPRjQbNGhXEwTZdq+gu0:VgxHHNv487QBPsTpjQAhX9d
TLSH
T14D74E0A1B3452F9ADD60A2B1FE164112D2A2BE740090533765B2765F77B3AF400B73AF
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths