jaffacakes118_Trojan-Ransom[.]Win32[.]Zerber[.]faqb[.]5a44bcbba7850121be90c9a1bd1fe007

General

Target
jaffacakes118_Trojan-Ransom.Win32.Zerber.faqb.5a44bcbba7850121be90c9a1bd1fe007
Size 412KB
Sample261016-e2z28shs7m
SHA256 4d29e02f7f74868e80eb23194417ddacd4f97ff393a316d1aacbeca0e67b80c2
MD5 5a44bcbba7850121be90c9a1bd1fe007
SHA1 0347a1c69fd430e405cf6ce533846ba622ec0a2b
SHA512 ea654595b61e6b94a2da4b7b034881105e6f6089c58fc9e4b9e8cb62e33f3c7a338fb03a740456bc7b07def45c1306d45212f4ea3cede14809ad365d90f0db8b
SSDEEP 6144:x3rdeAPVun50grDuh/WoTUg62LEbXLE1hz:JrdhPVun+yDu5WoT56aEPE1hz
TLSH
T151949EB9B1756A19D0DF8DFFC0A2A774943F460E2F5FE36A85A4701EEE503C0143A992
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Ransom.Win32.Zerber.faqb.5a44bcbba7850121be90c9a1bd1fe007

jaffacakes118_Trojan-Ransom.Win32.Zerber.faqb.5a44bcbba7850121be90c9a1bd1fe007

.exe 412KB

IMPHASH 76b6fdd57266b66a241292a7c373c20a
SHA256 4d29e02f7f74868e80eb23194417ddacd4f97ff393a316d1aacbeca0e67b80c2
MD5 5a44bcbba7850121be90c9a1bd1fe007
SHA1 0347a1c69fd430e405cf6ce533846ba622ec0a2b
SHA512 ea654595b61e6b94a2da4b7b034881105e6f6089c58fc9e4b9e8cb62e33f3c7a338fb03a740456bc7b07def45c1306d45212f4ea3cede14809ad365d90f0db8b
SSDEEP 6144:x3rdeAPVun50grDuh/WoTUg62LEbXLE1hz:JrdhPVun+yDu5WoT56aEPE1hz
TLSH
T151949EB9B1756A19D0DF8DFFC0A2A774943F460E2F5FE36A85A4701EEE503C0143A992
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4692

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths