jaffacakes118_Trojan[.]Win32[.]FakeAV[.]ifst[.]c719294123d47e9e5de8c87789a79c76

General

Target
jaffacakes118_Trojan.Win32.FakeAV.ifst.c719294123d47e9e5de8c87789a79c76
Size 352KB
Sample261018-x77ndatydw
SHA256 cbcc79a0e08cb9d9d7614e07adedcee7afcafed5a237da9a9f3cf5ee654855ef
MD5 c719294123d47e9e5de8c87789a79c76
SHA1 bd95e4620f60ef0fbec1f67bfa66e4e628793766
SHA512 118e2157bdcd92a31846ae2ec2fc598174183b6b6d39a40c148680937e10267d51f579702bfa39be2c5025a7eee1eb86f064478e106aad10eeb9cc129cb14f7d
SSDEEP 6144:xTvt0iqaV9NqRpFfTIdsw3NPBXru/EPTWZlryFJKBGmku:xBP/N4PIddNc/EPTelryLKnku
TLSH
T15B74F1072CB8DE05E07FE0712DC756564EB57DF800B205AE73E8A8562855ADCDCD878E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.FakeAV.ifst.c719294123d47e9e5de8c87789a79c76

jaffacakes118_Trojan.Win32.FakeAV.ifst.c719294123d47e9e5de8c87789a79c76

.exe 352KB

IMPHASH 6fd2a83a9b414fb9a9c5b8895f12f79e
SHA256 cbcc79a0e08cb9d9d7614e07adedcee7afcafed5a237da9a9f3cf5ee654855ef
MD5 c719294123d47e9e5de8c87789a79c76
SHA1 bd95e4620f60ef0fbec1f67bfa66e4e628793766
SHA512 118e2157bdcd92a31846ae2ec2fc598174183b6b6d39a40c148680937e10267d51f579702bfa39be2c5025a7eee1eb86f064478e106aad10eeb9cc129cb14f7d
SSDEEP 6144:xTvt0iqaV9NqRpFfTIdsw3NPBXru/EPTWZlryFJKBGmku:xBP/N4PIddNc/EPTelryLKnku
TLSH
T15B74F1072CB8DE05E07FE0712DC756564EB57DF800B205AE73E8A8562855ADCDCD878E
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

21330

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths