jaffacakes118_Trojan-Ransom[.]Win32[.]Zerber[.]dxcy[.]b83b041b8197ee54282146fdac844828

General

Target
jaffacakes118_Trojan-Ransom.Win32.Zerber.dxcy.b83b041b8197ee54282146fdac844828
Size 316KB
Sample261016-e2e23ag16s
SHA256 162688c318e7fbc4a6e55628f16bb78a432087b16835952aa2629a1c613b8d84
MD5 b83b041b8197ee54282146fdac844828
SHA1 46f212484a6d2e397fe4fa3b4a71d1749245996b
SHA512 3c4a29a78d4865f7a2e24c9c0c5ee2a3f310ff9e098b2a70ae92872493884ce1c67b774a908147d39939833b5b20b9c887b187cfceefc74b64173bfb27db6bd4
SSDEEP 6144:S3PUUVj16sMaLKeNLLXvwl2ttaN267WutEd9bf:2FJ1dMHuLYfg66uc
TLSH
T13464E023F644AC55FFED73B08E8682647045FE6A8C12E81731DDEAAE1D23A015934F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Ransom.Win32.Zerber.dxcy.b83b041b8197ee54282146fdac844828

jaffacakes118_Trojan-Ransom.Win32.Zerber.dxcy.b83b041b8197ee54282146fdac844828

.exe 316KB

IMPHASH a02292b8cd28f206eae229490c6a9183
SHA256 162688c318e7fbc4a6e55628f16bb78a432087b16835952aa2629a1c613b8d84
MD5 b83b041b8197ee54282146fdac844828
SHA1 46f212484a6d2e397fe4fa3b4a71d1749245996b
SHA512 3c4a29a78d4865f7a2e24c9c0c5ee2a3f310ff9e098b2a70ae92872493884ce1c67b774a908147d39939833b5b20b9c887b187cfceefc74b64173bfb27db6bd4
SSDEEP 6144:S3PUUVj16sMaLKeNLLXvwl2ttaN267WutEd9bf:2FJ1dMHuLYfg66uc
TLSH
T13464E023F644AC55FFED73B08E8682647045FE6A8C12E81731DDEAAE1D23A015934F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths