jaffacakes118_Trojan[.]Win32[.]Agent2[.]fknr[.]e934c8d5ee60aa6b63a38db4deb3d773

General

Target
jaffacakes118_Trojan.Win32.Agent2.fknr.e934c8d5ee60aa6b63a38db4deb3d773
Size 683KB
Sample261015-z4rtvsxt7l
SHA256 4f40997d5a4443b84145927a631aa196b67850163465ea8aecdd364677ce485e
MD5 e934c8d5ee60aa6b63a38db4deb3d773
SHA1 64232bed5badc2812eb9c80a314a6906fea63acd
SHA512 b17bfb68ee69da07bfa510cb7ffcc29f809741886eb079194d6e1ff76336d843f7564ffda942ebd371c86221794e13d248428245f15a50ab73a587390ca520ba
SSDEEP 12288:E/1K3BbTRtzZLy0xnncJ0hUV4eN8bmZmTBHx40QlACD51YRKvhoD:E/1K3PjxnI0eVjObmZIX40Q5d1Ycvh
TLSH
T1A2E48A0BB011D154D61582BF2889A3C080071EEDAF83B69BE1D5B635EDB51B61FFA70B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Agent2.fknr.e934c8d5ee60aa6b63a38db4deb3d773

jaffacakes118_Trojan.Win32.Agent2.fknr.e934c8d5ee60aa6b63a38db4deb3d773

.exe 683KB

IMPHASH dcbfc91b35cd1543c17222da4eb08b1d
SHA256 4f40997d5a4443b84145927a631aa196b67850163465ea8aecdd364677ce485e
MD5 e934c8d5ee60aa6b63a38db4deb3d773
SHA1 64232bed5badc2812eb9c80a314a6906fea63acd
SHA512 b17bfb68ee69da07bfa510cb7ffcc29f809741886eb079194d6e1ff76336d843f7564ffda942ebd371c86221794e13d248428245f15a50ab73a587390ca520ba
SSDEEP 12288:E/1K3BbTRtzZLy0xnncJ0hUV4eN8bmZmTBHx40QlACD51YRKvhoD:E/1K3PjxnI0eVjObmZIX40Q5d1Ycvh
TLSH
T1A2E48A0BB011D154D61582BF2889A3C080071EEDAF83B69BE1D5B635EDB51B61FFA70B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

27299

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\program z visuala\binder_stub\Release\binder_stub.pdb