jaffacakes118_Trojan-Ransom[.]Win32[.]Zerber[.]dqqk[.]c2504894e8026c8ef16c8455721f36e5

General

Target
jaffacakes118_Trojan-Ransom.Win32.Zerber.dqqk.c2504894e8026c8ef16c8455721f36e5
Size 396KB
Sample261016-e189hshs6j
SHA256 145d1db4032e3089d9d7ea9ca70ded01e78b9cf04ada90b3b6e41a674a124b09
MD5 c2504894e8026c8ef16c8455721f36e5
SHA1 418b1458b6da923af566690db6541b984de5e480
SHA512 463b720731345d11f2dcfd223b6fd43506499c4eef5d351d5cc911fb51655e7beafdcd91146208cb3c4ac9160ffb1102edb569bf40e24be35ad6545541ee18a4
SSDEEP 6144:HZwcaAnn0IaP7GTrZaqtv1jdOcVBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBS:HZtn2DerZZvxI
TLSH
T14084D142B638ADD0FD5CA1F0BF76E510918778A7B491505F31889EF8A2CD02B12BD5BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Ransom.Win32.Zerber.dqqk.c2504894e8026c8ef16c8455721f36e5

jaffacakes118_Trojan-Ransom.Win32.Zerber.dqqk.c2504894e8026c8ef16c8455721f36e5

.exe 396KB

IMPHASH 4539dd79737ac071a69e9cf5fd854d08
SHA256 145d1db4032e3089d9d7ea9ca70ded01e78b9cf04ada90b3b6e41a674a124b09
MD5 c2504894e8026c8ef16c8455721f36e5
SHA1 418b1458b6da923af566690db6541b984de5e480
SHA512 463b720731345d11f2dcfd223b6fd43506499c4eef5d351d5cc911fb51655e7beafdcd91146208cb3c4ac9160ffb1102edb569bf40e24be35ad6545541ee18a4
SSDEEP 6144:HZwcaAnn0IaP7GTrZaqtv1jdOcVBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBS:HZtn2DerZZvxI
TLSH
T14084D142B638ADD0FD5CA1F0BF76E510918778A7B491505F31889EF8A2CD02B12BD5BA
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4484

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths