jaffacakes118_a98e8117174591ab1cfb57e9e54eaa23c8fe82720c9f6aa227d3870738e6f858[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_a98e8117174591ab1cfb57e9e54eaa23c8fe82720c9f6aa227d3870738e6f858.bin
Size 26.2MB
Sample260910-a9d3hsck8z
SHA256 a98e8117174591ab1cfb57e9e54eaa23c8fe82720c9f6aa227d3870738e6f858
MD5 f5cc565210725917eb0554c1d99d7558
SHA1 e7576be515193892d9eabe5fb69d7115d1094ad9
SHA512 bb6621cf27401599712f64c5445a673fe6ea8425c4d86bfafefb257571a19176a4d1d69e88a8877cc0aeec11f6518b71b23bf54efead0a857ed1b1c6b0cff76e
SSDEEP 393216:v/poslQ5nzbHrB6S7Qhy2X6YuvbQSbKGxJ00xCH1lSYWTbaOPN7MgNj/dMU:vOIAzbLB37Q34T3+vgg1XuaOrNTGU
TLSH
T1985733667CD57090C4E7C641A2DF83A9B0E3967943DB6C1E63C23A411F01E9B9B0E97B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_a98e8117174591ab1cfb57e9e54eaa23c8fe82720c9f6aa227d3870738e6f858.bin

File Explorer

jaffacakes118_a98e8117174591ab1cfb57e9e54eaa23c8fe82720c9f6aa227d3870738e6f858.bin

.exe 26.2MB

jaffacakes118_a98e8117174591ab1cfb57e9e54eaa23c8fe82720c9f6aa227d3870738e6f858.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 a98e8117174591ab1cfb57e9e54eaa23c8fe82720c9f6aa227d3870738e6f858
MD5 f5cc565210725917eb0554c1d99d7558
SHA1 e7576be515193892d9eabe5fb69d7115d1094ad9
SHA512 bb6621cf27401599712f64c5445a673fe6ea8425c4d86bfafefb257571a19176a4d1d69e88a8877cc0aeec11f6518b71b23bf54efead0a857ed1b1c6b0cff76e
SSDEEP 393216:v/poslQ5nzbHrB6S7Qhy2X6YuvbQSbKGxJ00xCH1lSYWTbaOPN7MgNj/dMU:vOIAzbLB37Q34T3+vgg1XuaOrNTGU
TLSH
T1985733667CD57090C4E7C641A2DF83A9B0E3967943DB6C1E63C23A411F01E9B9B0E97B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30940239

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

6.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

964KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.<}V

Size

Virtual Size

19.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ygd

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.]8>

Size

26.2MB

Virtual Size

26.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_a98e8117174591ab1cfb57e9e54eaa23c8fe82720c9f6aa227d3870738e6f858.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic