jaffacakes118_Trojan-Spy[.]Win32[.]Zbot[.]vyyr[.]ba3fdb87983ef6e68de3851db66f2cf0

General

Target
jaffacakes118_Trojan-Spy.Win32.Zbot.vyyr.ba3fdb87983ef6e68de3851db66f2cf0
Size 314KB
Sample261016-df1wzagv4m
SHA256 8d8f974127d93c9e5894a2097c4496669e821ab0e6f7a0d9f4f4c6c56afe6048
MD5 ba3fdb87983ef6e68de3851db66f2cf0
SHA1 76160898f6e204aabd63209c46ece3c7c426d2d2
SHA512 c34353791531a722c27f504b5978b20ae2b64a5aedb7e91a6bd5e3f224fb702eaaf11a59a8980bbde99cc5c20e45899c9a4c8449afc45e7f3d38102b3ce4d9c1
SSDEEP 6144:gB2Mq6dGjQViXPguzf1o17SgO8VYANS/J63xyxlfugo:gBB1Vcoi+1ugPVM/UBolfNo
TLSH
T10464E18568873C37D593C9BBE91AD8F06B40752F5A43C012EA5A250D2963CDCBEDCBC6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.Zbot.vyyr.ba3fdb87983ef6e68de3851db66f2cf0

jaffacakes118_Trojan-Spy.Win32.Zbot.vyyr.ba3fdb87983ef6e68de3851db66f2cf0

.exe 314KB

IMPHASH f28cdc13fa7c2cf9f97a6bea988b2cb2
SHA256 8d8f974127d93c9e5894a2097c4496669e821ab0e6f7a0d9f4f4c6c56afe6048
MD5 ba3fdb87983ef6e68de3851db66f2cf0
SHA1 76160898f6e204aabd63209c46ece3c7c426d2d2
SHA512 c34353791531a722c27f504b5978b20ae2b64a5aedb7e91a6bd5e3f224fb702eaaf11a59a8980bbde99cc5c20e45899c9a4c8449afc45e7f3d38102b3ce4d9c1
SSDEEP 6144:gB2Mq6dGjQViXPguzf1o17SgO8VYANS/J63xyxlfugo:gBB1Vcoi+1ugPVM/UBolfNo
TLSH
T10464E18568873C37D593C9BBE91AD8F06B40752F5A43C012EA5A250D2963CDCBEDCBC6
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4660

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths