jaffacakes118_Trojan-Spy[.]Win32[.]Zbot[.]nazx[.]6310b1ee2a5a915c68950

General

Target
jaffacakes118_Trojan-Spy.Win32.Zbot.nazx.6310b1ee2a5a915c68950
Size 234KB
Sample261016-dbpcdags4v
SHA256 9bce15674da546847e274849b6fffae2a1b590d7f953676a68195e23014b7832
MD5 6ab821831cb6310b1ee2a5a915c68950
SHA1 e64775cee5cacd65505eb7780fbd1b879e85832f
SHA512 e06fff0181b416444f2c54f6d574a7dc48ddee7ccadf2888a021ff48bc7b592abf75374184eae071d6ce6871df5ee960e56727a2ca9b837a878e7d9b85a1d2f2
SSDEEP 6144:xuhKyeEMC/LQ79EZubiqnVtEJ7OK4jJogcv7c:xYXHMWU79Bb3icjJogU7
TLSH
T1AB341251BBF10E21F4BAA773B4B283411B7FBC156AB4918E90D4350E1FB13A587263A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.Zbot.nazx.6310b1ee2a5a915c68950

IMPHASH e1099be4de27b0497a1417c728c6d9ba
SHA256 9bce15674da546847e274849b6fffae2a1b590d7f953676a68195e23014b7832
MD5 6ab821831cb6310b1ee2a5a915c68950
SHA1 e64775cee5cacd65505eb7780fbd1b879e85832f
SHA512 e06fff0181b416444f2c54f6d574a7dc48ddee7ccadf2888a021ff48bc7b592abf75374184eae071d6ce6871df5ee960e56727a2ca9b837a878e7d9b85a1d2f2
SSDEEP 6144:xuhKyeEMC/LQ79EZubiqnVtEJ7OK4jJogcv7c:xYXHMWU79Bb3icjJogU7
TLSH
T1AB341251BBF10E21F4BAA773B4B283411B7FBC156AB4918E90D4350E1FB13A587263A7
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths