jaffacakes118_97af3489af5403de2a41502ca97e03f133753571b3b973ddaa9e17dcb2f676f2[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_97af3489af5403de2a41502ca97e03f133753571b3b973ddaa9e17dcb2f676f2.bin
Size 25.6MB
Sample260909-27pj1sbm21
SHA256 97af3489af5403de2a41502ca97e03f133753571b3b973ddaa9e17dcb2f676f2
MD5 6d16e0be494b61ce48841e7b262d10c7
SHA1 9c1f48108a9e5c5df36b61dde24d9e7f90b85560
SHA512 fa0daf26f3ee22a3cf21fe9f88863c8b82fba8646966a42d6875347672557fa7b2dd0479ed6b9be85596471e0a10cd71bb7d171fe648bf8d1001534ef6d15618
SSDEEP 393216:6VPCZI780n+K8VmCYQdpAWwNuNeczusb+QuhX7a1/Qu55bJaLwpb:XZIzZCV8kcsut2YuP1aC
TLSH
T1B84733E5A5C5A2D88BD38944F38F53DEA0C3B4361AD98C2C37D93C065730C9AA64AD77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_97af3489af5403de2a41502ca97e03f133753571b3b973ddaa9e17dcb2f676f2.bin

File Explorer

jaffacakes118_97af3489af5403de2a41502ca97e03f133753571b3b973ddaa9e17dcb2f676f2.bin

.exe 25.6MB

jaffacakes118_97af3489af5403de2a41502ca97e03f133753571b3b973ddaa9e17dcb2f676f2.bin

IMPHASH f71acb5fde9b207f9af5f14af4e24cc7
SHA256 97af3489af5403de2a41502ca97e03f133753571b3b973ddaa9e17dcb2f676f2
MD5 6d16e0be494b61ce48841e7b262d10c7
SHA1 9c1f48108a9e5c5df36b61dde24d9e7f90b85560
SHA512 fa0daf26f3ee22a3cf21fe9f88863c8b82fba8646966a42d6875347672557fa7b2dd0479ed6b9be85596471e0a10cd71bb7d171fe648bf8d1001534ef6d15618
SSDEEP 393216:6VPCZI780n+K8VmCYQdpAWwNuNeczusb+QuhX7a1/Qu55bJaLwpb:XZIzZCV8kcsut2YuP1aC
TLSH
T1B84733E5A5C5A2D88BD38944F38F53DEA0C3B4361AD98C2C37D93C065730C9AA64AD77
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29406647

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.9T2

Size

Virtual Size

17.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.WlO

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.F%<

Size

25.6MB

Virtual Size

25.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_97af3489af5403de2a41502ca97e03f133753571b3b973ddaa9e17dcb2f676f2.bin

advapi32

dxgi

kernel32

shell32

user32

winhttp

d3d12

generic