jaffacakes118_2ae29faab2199b659866652a5408f78e84227bc9b158864de6fc206efc9a1f3b[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_2ae29faab2199b659866652a5408f78e84227bc9b158864de6fc206efc9a1f3b.bin
Size 22.1MB
Sample260910-a823ysvxgt
SHA256 2ae29faab2199b659866652a5408f78e84227bc9b158864de6fc206efc9a1f3b
MD5 c080e1c0b4606f4842dad792062a3b58
SHA1 beca250ebe4aa6cacdd8875e08a6c186d3d428cc
SHA512 b78ad19a7c9e4f016ab0b701a93d287c8126e3c957677a27767d33c53189797c0b77052c9185c09adef7f238482251adb383f29e4a867f0865b1ac80c9a4e075
SSDEEP 393216:s6DsDNgk76FmAXFMjteoGfywrm6alvpCarpmnF+PGwY4dWuLUOuEIHkez2:sqsDNgk7imAXFMjt/GfH6vpCaN6FcdWL
TLSH
T1CB37236B91D5A7E88B4206842A8A56CD34D8B45F90FD6D283FCF1C02E578E2E458DDF3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_2ae29faab2199b659866652a5408f78e84227bc9b158864de6fc206efc9a1f3b.bin

File Explorer

jaffacakes118_2ae29faab2199b659866652a5408f78e84227bc9b158864de6fc206efc9a1f3b.bin

.exe 22.1MB

jaffacakes118_2ae29faab2199b659866652a5408f78e84227bc9b158864de6fc206efc9a1f3b.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 2ae29faab2199b659866652a5408f78e84227bc9b158864de6fc206efc9a1f3b
MD5 c080e1c0b4606f4842dad792062a3b58
SHA1 beca250ebe4aa6cacdd8875e08a6c186d3d428cc
SHA512 b78ad19a7c9e4f016ab0b701a93d287c8126e3c957677a27767d33c53189797c0b77052c9185c09adef7f238482251adb383f29e4a867f0865b1ac80c9a4e075
SSDEEP 393216:s6DsDNgk76FmAXFMjteoGfywrm6alvpCarpmnF+PGwY4dWuLUOuEIHkez2:sqsDNgk7imAXFMjt/GfH6vpCaN6FcdWL
TLSH
T1CB37236B91D5A7E88B4206842A8A56CD34D8B45F90FD6D283FCF1C02E578E2E458DDF3
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42733510

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

685KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.K\R

Size

Virtual Size

15.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.?sa

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.}9.

Size

22.1MB

Virtual Size

22.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_2ae29faab2199b659866652a5408f78e84227bc9b158864de6fc206efc9a1f3b.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic