jaffacakes118_Trojan-Spy[.]Win32[.]WinSpy[.]cjm[.]ce2280f7e37964f7c3e26d8f42956163

General

Target
jaffacakes118_Trojan-Spy.Win32.WinSpy.cjm.ce2280f7e37964f7c3e26d8f42956163
Size 300KB
Sample261018-3dkveaby3v
SHA256 20c09c2874ce9365bd3606b012b87343a0cce63bfe850d5f2972f024a5eb1232
MD5 ce2280f7e37964f7c3e26d8f42956163
SHA1 de63c3ffc026f53eccc40118f6762d9a02b6be4c
SHA512 33bdd5643496aca6f37428d19ede54f3f022bf7ae1c7e71ddf434ab947f921b9584387a99a0209f152c5f7a4d1a92ba4fe6b3d831812cb7cf1e244c266c9fbf9
SSDEEP 3072:wUcOqSj1mr9Hx9Kh6x7IiMWf2sI18u2yj4lKZTG2OD6ZcxmVUKyR/P+JrbDwyxao:wSqo6x4P2yRE36ZumVUKyReJrbke2Zi
TLSH
T170643933F6859186F64642B11CB2C5B42763BCDB6A633A073084372DA8B6F536965F0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.WinSpy.cjm.ce2280f7e37964f7c3e26d8f42956163

jaffacakes118_Trojan-Spy.Win32.WinSpy.cjm.ce2280f7e37964f7c3e26d8f42956163

.exe 300KB

IMPHASH d8e7079ff6415353bd8d47635207adae
SHA256 20c09c2874ce9365bd3606b012b87343a0cce63bfe850d5f2972f024a5eb1232
MD5 ce2280f7e37964f7c3e26d8f42956163
SHA1 de63c3ffc026f53eccc40118f6762d9a02b6be4c
SHA512 33bdd5643496aca6f37428d19ede54f3f022bf7ae1c7e71ddf434ab947f921b9584387a99a0209f152c5f7a4d1a92ba4fe6b3d831812cb7cf1e244c266c9fbf9
SSDEEP 3072:wUcOqSj1mr9Hx9Kh6x7IiMWf2sI18u2yj4lKZTG2OD6ZcxmVUKyR/P+JrbDwyxao:wSqo6x4P2yRE36ZumVUKyReJrbke2Zi
TLSH
T170643933F6859186F64642B11CB2C5B42763BCDB6A633A073084372DA8B6F536965F0F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths