jaffacakes118_85af4da0abe428ae26068738df6c5a694a07c9695ca2930bbbf46e9a0daaa84d[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_85af4da0abe428ae26068738df6c5a694a07c9695ca2930bbbf46e9a0daaa84d.bin
Size 25.0MB
Sample260909-2e2nwatvcs
SHA256 85af4da0abe428ae26068738df6c5a694a07c9695ca2930bbbf46e9a0daaa84d
MD5 0b754f4f5f615644225e66b830a4bb77
SHA1 3db674c46c4e548b6c63512a855aba79af32a8ef
SHA512 cd80c537b94af2f6d9ab672fb9491a926a0cf9d24d481be491e3e06079584cd6246e595a0b18f2e2693a1757c7f3ab07d3b68b40e8d37139ce8fdaf90064cd6b
SSDEEP 786432:mQn+G1549yBL2YZHHjMVjwgWve+9xnZMRjzyf9T:5+G15wyBRZnjMpuFL
TLSH
T19F47238A65E9A1D8CBC205D4398A41CA71D4E89E80FD9C397FCF1C02F564D6E059EEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_85af4da0abe428ae26068738df6c5a694a07c9695ca2930bbbf46e9a0daaa84d.bin

File Explorer

jaffacakes118_85af4da0abe428ae26068738df6c5a694a07c9695ca2930bbbf46e9a0daaa84d.bin

.exe 25.0MB

jaffacakes118_85af4da0abe428ae26068738df6c5a694a07c9695ca2930bbbf46e9a0daaa84d.bin

IMPHASH f71acb5fde9b207f9af5f14af4e24cc7
SHA256 85af4da0abe428ae26068738df6c5a694a07c9695ca2930bbbf46e9a0daaa84d
MD5 0b754f4f5f615644225e66b830a4bb77
SHA1 3db674c46c4e548b6c63512a855aba79af32a8ef
SHA512 cd80c537b94af2f6d9ab672fb9491a926a0cf9d24d481be491e3e06079584cd6246e595a0b18f2e2693a1757c7f3ab07d3b68b40e8d37139ce8fdaf90064cd6b
SSDEEP 786432:mQn+G1549yBL2YZHHjMVjwgWve+9xnZMRjzyf9T:5+G15wyBRZnjMpuFL
TLSH
T19F47238A65E9A1D8CBC205D4398A41CA71D4E89E80FD9C397FCF1C02F564D6E059EEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23588627

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bUE

Size

Virtual Size

16.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.D??

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.SN<

Size

25.0MB

Virtual Size

25.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_85af4da0abe428ae26068738df6c5a694a07c9695ca2930bbbf46e9a0daaa84d.bin

advapi32

dxgi

kernel32

shell32

user32

winhttp

d3d12

generic