jaffacakes118_Trojan[.]Win32[.]FakeAV[.]ehwe[.]448ac7d5bc61f728249bfe1cfdb62056

General

Target
jaffacakes118_Trojan.Win32.FakeAV.ehwe.448ac7d5bc61f728249bfe1cfdb62056
Size 834KB
Sample261018-x7grystycs
SHA256 e1a1c2440ee87268e72a69fec13b75846f42c78ee32cfb4578963a3b23af67fd
MD5 448ac7d5bc61f728249bfe1cfdb62056
SHA1 8400c6df2c6ad0545af8f6084b62b47024e18241
SHA512 ba82125bc959afed1431910607690caecfea6abd50905cf31f448591285568dbfe5a979e6327b35c4470cf32b70811be501df62d158f81af604f1c4f4d027531
SSDEEP 24576:bDeBfQf1dH9iJiYWcB8j5HkjOZtg5n3ccSK0b7:PYfEdHGtWcB8VEUqn3ccSK
TLSH
T16C0523A47A133A46C4728B3558930FF0064F6F5D86468BAE7C578E9B0DAE3CEA411778
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.FakeAV.ehwe.448ac7d5bc61f728249bfe1cfdb62056

jaffacakes118_Trojan.Win32.FakeAV.ehwe.448ac7d5bc61f728249bfe1cfdb62056

.exe 834KB

SHA256 e1a1c2440ee87268e72a69fec13b75846f42c78ee32cfb4578963a3b23af67fd
MD5 448ac7d5bc61f728249bfe1cfdb62056
SHA1 8400c6df2c6ad0545af8f6084b62b47024e18241
SHA512 ba82125bc959afed1431910607690caecfea6abd50905cf31f448591285568dbfe5a979e6327b35c4470cf32b70811be501df62d158f81af604f1c4f4d027531
SSDEEP 24576:bDeBfQf1dH9iJiYWcB8j5HkjOZtg5n3ccSK0b7:PYfEdHGtWcB8VEUqn3ccSK
TLSH
T16C0523A47A133A46C4728B3558930FF0064F6F5D86468BAE7C578E9B0DAE3CEA411778
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6483616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths