jaffacakes118_Trojan[.]Win32[.]Gofot[.]cvf[.]0526311084847217dd40c98d8c8a2624

General

Target
jaffacakes118_Trojan.Win32.Gofot.cvf.0526311084847217dd40c98d8c8a2624
Size 125KB
Sample261018-v5damsswex
SHA256 3fb13b9eaae70b81d362d635683dd46a6236b5e199286a547a53475e5cc3f240
MD5 0526311084847217dd40c98d8c8a2624
SHA1 49b75c3cf9c0605850d5918d0a1c65d130ca7f14
SHA512 ad0f3e8ad3005d8241bea8755c2d2c2f15e1ab72b46cc09e6a0815f59bf9a6904310eb3d929c9d82ba70c0557ffa73c029cac809f8c9560f8e578aa524cf00dc
SSDEEP 1536:U2NxTQUzUgPH6Dz5+lXxXAXa4Gk/lnETHrLOxWFUzz0O1777gQR:Oc6Dz5Qhw5Gk/lnAHOaW
TLSH
T139C35B023910D171D8288875EB9BD2F40B2A7DB2DB06964372D53F5F3F72AB19F26606
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Gofot.cvf.0526311084847217dd40c98d8c8a2624

jaffacakes118_Trojan.Win32.Gofot.cvf.0526311084847217dd40c98d8c8a2624

.exe 125KB

IMPHASH 7221540756c272f34ed46f73e184f9d9
SHA256 3fb13b9eaae70b81d362d635683dd46a6236b5e199286a547a53475e5cc3f240
MD5 0526311084847217dd40c98d8c8a2624
SHA1 49b75c3cf9c0605850d5918d0a1c65d130ca7f14
SHA512 ad0f3e8ad3005d8241bea8755c2d2c2f15e1ab72b46cc09e6a0815f59bf9a6904310eb3d929c9d82ba70c0557ffa73c029cac809f8c9560f8e578aa524cf00dc
SSDEEP 1536:U2NxTQUzUgPH6Dz5+lXxXAXa4Gk/lnETHrLOxWFUzz0O1777gQR:Oc6Dz5Qhw5Gk/lnAHOaW
TLSH
T139C35B023910D171D8288875EB9BD2F40B2A7DB2DB06964372D53F5F3F72AB19F26606
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

5141

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths