jaffacakes118_Trojan[.]Win32[.]Agent[.]uvdb[.]df3f4747ede899e56747346c44a05a47

General

Target
jaffacakes118_Trojan.Win32.Agent.uvdb.df3f4747ede899e56747346c44a05a47
Size 432KB
Sample261016-ms56wsdv5x
SHA256 89fac623a1fc651bc8b3cb58e52ac8ae113d1c177169be5c70ae9df09dea35f8
MD5 df3f4747ede899e56747346c44a05a47
SHA1 d76c6afc25911d71b47887dbecd59227531073e8
SHA512 73ee243fd9b3b3554ed9b88c6ed0197942104b6db8dd137eb34a9d021f7fe912a081e41967ad879407a5b9ca5144de0a52c603cdb98c8c48fa74cca403d3c1ad
SSDEEP 6144:kW6IZ+4xLO76tXplF2aQxpitshM+mXHxBChOf5P/AcedMvuUrfnKn72kp98ghLoJ:kW6IfoAt2niGdcRBChOhcduC5p9NoJ
TLSH
T1B794237859A4B4EF20E372461A67C9B5A394FF31C95E80B7092BE1BC39AF36D4C75090
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/patch.exe

File Explorer

jaffacakes118_Trojan.Win32.Agent.uvdb.df3f4747ede899e56747346c44a05a47

.zip 432KB
patch.exe

.exe 615KB

jaffacakes118_Trojan.Win32.Agent.uvdb.df3f4747ede899e56747346c44a05a47

SHA256 89fac623a1fc651bc8b3cb58e52ac8ae113d1c177169be5c70ae9df09dea35f8
MD5 df3f4747ede899e56747346c44a05a47
SHA1 d76c6afc25911d71b47887dbecd59227531073e8
SHA512 73ee243fd9b3b3554ed9b88c6ed0197942104b6db8dd137eb34a9d021f7fe912a081e41967ad879407a5b9ca5144de0a52c603cdb98c8c48fa74cca403d3c1ad
SSDEEP 6144:kW6IZ+4xLO76tXplF2aQxpitshM+mXHxBChOf5P/AcedMvuUrfnKn72kp98ghLoJ:kW6IfoAt2niGdcRBChOhcduC5p9NoJ
TLSH
T1B794237859A4B4EF20E372461A67C9B5A394FF31C95E80B7092BE1BC39AF36D4C75090
MD5 SHA1 SHA512 SSDEEP TLSH

patch.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8b37195dfba32a05f15cb3f5b1d202bcf520b01ea5cfa4dfee4031e6dae5acb0
MD5 e4f73f12a8b12ec9a2c97a3d669088e9
SHA1 4ad386d4fe5ec75e7500b9f37ee1d32763c4d1ba
SHA512 a4b09a2d2d97ee1a872dc5f0b3791c7e37abfa16338ba23de8d3c066320da91415753f2568fe9b753c1485bffa625ca08fc8d1a4dac96eaf16aa71aaa82228c8
SSDEEP 12288:qDDayNP2zaR8A5+nzSN26WHHnchTEN8g1FWm5DvZyf0LS:caC22+zSQxHHyTEt300L
TLSH
T1A9D4E132612F8CF9EE0CA3FFB95E7A5C1F350893D871A2B5A25CCFC2629134256B5119
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\gxgaming\Desktop\nit\nit\obj\Release\nit.pdb

jaffacakes118_Trojan.Win32.Agent.uvdb.df3f4747ede899e56747346c44a05a47

patch.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan.Win32.Agent.uvdb.df3f4747ede899e56747346c44a05a47

patch.exe

mscoree

dotnet