jaffacakes118_Trojan[.]Win32[.]Genome[.]qvud[.]83ed409b652c25185442403977e41ffb

General

Target
jaffacakes118_Trojan.Win32.Genome.qvud.83ed409b652c25185442403977e41ffb
Size 557KB
Sample261018-xp91satwdv
SHA256 5f32ec88daa4547481f9ec0d6bf82155ecd455129bf09a703d0e198f4665c8e2
MD5 83ed409b652c25185442403977e41ffb
SHA1 58d32c0b4f7f3eea640c65b20b345b3734870cf8
SHA512 dfbcef27a45778036dd2c7824a1e187f7c768a3469f935f58216a2e0bebdf5f9c84251badac19e121211c9eb5cc170d8a98f2e9f49d744e514aa768c9ad25d8e
SSDEEP 12288:6GuWm0QRVRdgFkEXIc0pg3xTX2ep3vWQrWKcmtrX:Xc7dgadoTXFdeaWylX
TLSH
T1C7C42303F668C755EA3C82716EC3DE1C275C796A65CA7B37B0B85B0FBAB09212C1D059
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Genome.qvud.83ed409b652c25185442403977e41ffb

jaffacakes118_Trojan.Win32.Genome.qvud.83ed409b652c25185442403977e41ffb

.exe 557KB

SHA256 5f32ec88daa4547481f9ec0d6bf82155ecd455129bf09a703d0e198f4665c8e2
MD5 83ed409b652c25185442403977e41ffb
SHA1 58d32c0b4f7f3eea640c65b20b345b3734870cf8
SHA512 dfbcef27a45778036dd2c7824a1e187f7c768a3469f935f58216a2e0bebdf5f9c84251badac19e121211c9eb5cc170d8a98f2e9f49d744e514aa768c9ad25d8e
SSDEEP 12288:6GuWm0QRVRdgFkEXIc0pg3xTX2ep3vWQrWKcmtrX:Xc7dgadoTXFdeaWylX
TLSH
T1C7C42303F668C755EA3C82716EC3DE1C275C796A65CA7B37B0B85B0FBAB09212C1D059
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1647872

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths