jaffacakes118_Trojan-Ransom[.]Win32[.]Zerber[.]dwth[.]10def2d879fea8dee2595d9869372e79

General

Target
jaffacakes118_Trojan-Ransom.Win32.Zerber.dwth.10def2d879fea8dee2595d9869372e79
Size 297KB
Sample261016-e2cxpsg151
SHA256 4a8a428ddc4db3aef5e7cb1893782787a0bef5dff708f2ef670ac29e1d83eb82
MD5 10def2d879fea8dee2595d9869372e79
SHA1 0276dfc536aeff37e3751d3834279c59ab216b36
SHA512 f8cb184818716e5755f1556b6e39d461d46bffdb690af2222cab129caef4a5d67847dd622af226a2ee81004355a9a8653c7dfb0145778b85b65237d5bd69a661
SSDEEP 3072:HjPI/I/IoI/I/ICIWCByEnh3zOUoaGBkUNVn65N6iERhpWYYzw6yd9yPPp1Gi8bv:F0Dh3zt9FUNVn65E0w6yMSivdyNX
TLSH
T11954E0276B22E546C68B80B077FD4789B3A7AC27F0042D8CACD43C171735B5D6D16ABA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Ransom.Win32.Zerber.dwth.10def2d879fea8dee2595d9869372e79

jaffacakes118_Trojan-Ransom.Win32.Zerber.dwth.10def2d879fea8dee2595d9869372e79

.exe 297KB

IMPHASH 393cdf762816123de567d04611d679e3
SHA256 4a8a428ddc4db3aef5e7cb1893782787a0bef5dff708f2ef670ac29e1d83eb82
MD5 10def2d879fea8dee2595d9869372e79
SHA1 0276dfc536aeff37e3751d3834279c59ab216b36
SHA512 f8cb184818716e5755f1556b6e39d461d46bffdb690af2222cab129caef4a5d67847dd622af226a2ee81004355a9a8653c7dfb0145778b85b65237d5bd69a661
SSDEEP 3072:HjPI/I/IoI/I/ICIWCByEnh3zOUoaGBkUNVn65N6iERhpWYYzw6yd9yPPp1Gi8bv:F0Dh3zt9FUNVn65E0w6yMSivdyNX
TLSH
T11954E0276B22E546C68B80B077FD4789B3A7AC27F0042D8CACD43C171735B5D6D16ABA
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

14423

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths