jaffacakes118_Trojan[.]Win32[.]Buzus[.]nrys[.]569fd03a46dbbadc4d40c000d56a66b1

General

Target
jaffacakes118_Trojan.Win32.Buzus.nrys.569fd03a46dbbadc4d40c000d56a66b1
Size 59KB
Sample261018-1slddaa131
SHA256 cb08ecb85548cb59996dbd5bff543afff754245c74ebad9c5cedfb162cf03819
MD5 569fd03a46dbbadc4d40c000d56a66b1
SHA1 2ef3a682bfe55bc48ee7aa36db8dd1c1baac3415
SHA512 e02c093d6ac0993616f3e608394eb2118f4584a7cfa3fa5d13feff89e78efcf0ed83317f26cf99ac0a43c2ba9c1b743dc106632b69177925a364d23cd87e5b08
SSDEEP 1536:tLIuj/JFn/wTH1ENJR1O6L91ncWHSOgaO0HZzgfnouy88W:tLIE/IVSfOO0WHbgaO0HZ8Pout8W
TLSH
T1B3430142E3C68C6CC6E7517AECBB93B40401BD361C2C55B999947BBF8D30660D8A87B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Buzus.nrys.569fd03a46dbbadc4d40c000d56a66b1

jaffacakes118_Trojan.Win32.Buzus.nrys.569fd03a46dbbadc4d40c000d56a66b1

.exe 59KB

SHA256 cb08ecb85548cb59996dbd5bff543afff754245c74ebad9c5cedfb162cf03819
MD5 569fd03a46dbbadc4d40c000d56a66b1
SHA1 2ef3a682bfe55bc48ee7aa36db8dd1c1baac3415
SHA512 e02c093d6ac0993616f3e608394eb2118f4584a7cfa3fa5d13feff89e78efcf0ed83317f26cf99ac0a43c2ba9c1b743dc106632b69177925a364d23cd87e5b08
SSDEEP 1536:tLIuj/JFn/wTH1ENJR1O6L91ncWHSOgaO0HZzgfnouy88W:tLIE/IVSfOO0WHbgaO0HZ8Pout8W
TLSH
T1B3430142E3C68C6CC6E7517AECBB93B40401BD361C2C55B999947BBF8D30660D8A87B3
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

249360

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths