jaffacakes118_Backdoor[.]Win32[.]Rbot[.]gen[.]3edafdcc502fb8c578d29b6a967d63e7

General

Target
jaffacakes118_Backdoor.Win32.Rbot.gen.3edafdcc502fb8c578d29b6a967d63e7
Size 87KB
Sample261015-paktcatvbt
SHA256 a87ec0be45f54dc0ce0a1da3a339873c4c0ba44a2ac82726dc0a651760695b28
MD5 3edafdcc502fb8c578d29b6a967d63e7
SHA1 e92092c98b787eb5c7c0d9750ffb46dec1e59e20
SHA512 fec483e2217201fdf011f0a53dd91a7449a13d3469ed5e7c1206bfbdcfaeea595e5ed6713081e7605614687a84b8443ff61c8324b782eb6c6b273225635dd3d8
SSDEEP 1536:bAOaKC8IcenFpZrRHHVGG4lBNXooT4Q5Y2RoetVb6R7PwIXF19JYYWf19CFflLP:bTIcMZrdg97VT4kYaoetE9PwIXFJYIf9
TLSH
T1A09312A63B9165F5C4EA69F3920E8EC5AF0933552EC403136B1FDC5F9C760B423A5493
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Backdoor.Win32.Rbot.gen.3edafdcc502fb8c578d29b6a967d63e7

jaffacakes118_Backdoor.Win32.Rbot.gen.3edafdcc502fb8c578d29b6a967d63e7

.exe 87KB

SHA256 a87ec0be45f54dc0ce0a1da3a339873c4c0ba44a2ac82726dc0a651760695b28
MD5 3edafdcc502fb8c578d29b6a967d63e7
SHA1 e92092c98b787eb5c7c0d9750ffb46dec1e59e20
SHA512 fec483e2217201fdf011f0a53dd91a7449a13d3469ed5e7c1206bfbdcfaeea595e5ed6713081e7605614687a84b8443ff61c8324b782eb6c6b273225635dd3d8
SSDEEP 1536:bAOaKC8IcenFpZrRHHVGG4lBNXooT4Q5Y2RoetVb6R7PwIXF19JYYWf19CFflLP:bTIcMZrdg97VT4kYaoetE9PwIXFJYIf9
TLSH
T1A09312A63B9165F5C4EA69F3920E8EC5AF0933552EC403136B1FDC5F9C760B423A5493
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

834353

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths