jaffacakes118_Trojan-Spy[.]Win32[.]SpyEyes[.]qhs[.]3f834b038557eaa0b5ea90d50c3b5d16

General

Target
jaffacakes118_Trojan-Spy.Win32.SpyEyes.qhs.3f834b038557eaa0b5ea90d50c3b5d16
Size 485KB
Sample261018-2y6ryada33
SHA256 01d1337f17a98e25975a05793e1ca8df8586e1303127a995bb38e242be7e923a
MD5 3f834b038557eaa0b5ea90d50c3b5d16
SHA1 b5e999a4ae30e115477540a18e92ed7d793d52bb
SHA512 3b6ffb3c82bfc9eb1e3f05ee69a7e95ca7f1ee7794c838d3643ce24c42e11ccbbf1f9066674c5423dda73407b3dd50dadb2fc8ec6e53f17207b0f6eced2e7d01
SSDEEP 12288:8v54DGXpKDxedlCK7Nwf6K/A+2l7bvYXtgmWEx+7O8Hf:8v54DGZK4drk477bSWExgOWf
TLSH
T117B42312FBE0ED74CFB244F05F9AD3AB6645F40514AF7E1B4192D1BCD8B858EA681C22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.SpyEyes.qhs.3f834b038557eaa0b5ea90d50c3b5d16

jaffacakes118_Trojan-Spy.Win32.SpyEyes.qhs.3f834b038557eaa0b5ea90d50c3b5d16

.exe 485KB

SHA256 01d1337f17a98e25975a05793e1ca8df8586e1303127a995bb38e242be7e923a
MD5 3f834b038557eaa0b5ea90d50c3b5d16
SHA1 b5e999a4ae30e115477540a18e92ed7d793d52bb
SHA512 3b6ffb3c82bfc9eb1e3f05ee69a7e95ca7f1ee7794c838d3643ce24c42e11ccbbf1f9066674c5423dda73407b3dd50dadb2fc8ec6e53f17207b0f6eced2e7d01
SSDEEP 12288:8v54DGXpKDxedlCK7Nwf6K/A+2l7bvYXtgmWEx+7O8Hf:8v54DGZK4drk477bSWExgOWf
TLSH
T117B42312FBE0ED74CFB244F05F9AD3AB6645F40514AF7E1B4192D1BCD8B858EA681C22
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

706480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths