jaffacakes118_Trojan[.]Win32[.]FakeAV[.]nmoy[.]a1be63e41e001ee653141541754938b9

General

Target
jaffacakes118_Trojan.Win32.FakeAV.nmoy.a1be63e41e001ee653141541754938b9
Size 404KB
Sample261018-x9vftstyfs
SHA256 833d29642bca3de2a36b9570b3b0ef1c36ea34d613aaaa2c273d1b52b0e3cf0c
MD5 a1be63e41e001ee653141541754938b9
SHA1 e658aaa7295a9baefa9a6a5f8febc20d6891839a
SHA512 6dadfe479806098252a97702c370acdfbe5698a725c7f8ef703c5daec930aca4459d10d50da9acbc248d79711406802cc5c516b4198398ea7e6b42ad5f94b746
SSDEEP 12288:lWOBaW4NghEdNDLkyZ5Ia+JzcbtUgBByPE:DBalghEdNMhagcbtP6P
TLSH
T1DF9412DF36C3D4E6CA716CFD166E814A581F6C4E049E50CE2C12B2376BA26B78C6614F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.FakeAV.nmoy.a1be63e41e001ee653141541754938b9

jaffacakes118_Trojan.Win32.FakeAV.nmoy.a1be63e41e001ee653141541754938b9

.exe 404KB

IMPHASH c94491f4800c4584f175c6f34683a12c
SHA256 833d29642bca3de2a36b9570b3b0ef1c36ea34d613aaaa2c273d1b52b0e3cf0c
MD5 a1be63e41e001ee653141541754938b9
SHA1 e658aaa7295a9baefa9a6a5f8febc20d6891839a
SHA512 6dadfe479806098252a97702c370acdfbe5698a725c7f8ef703c5daec930aca4459d10d50da9acbc248d79711406802cc5c516b4198398ea7e6b42ad5f94b746
SSDEEP 12288:lWOBaW4NghEdNDLkyZ5Ia+JzcbtUgBByPE:DBalghEdNMhagcbtP6P
TLSH
T1DF9412DF36C3D4E6CA716CFD166E814A581F6C4E049E50CE2C12B2376BA26B78C6614F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

6339

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths