jaffacakes118_82f60aa98a0fa30b37bc40678f5e32ff683b43781ced497f7452d243cbaa01f4[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_82f60aa98a0fa30b37bc40678f5e32ff683b43781ced497f7452d243cbaa01f4.bin
Size 18.8MB
Sample260910-avqsrsvwhx
SHA256 82f60aa98a0fa30b37bc40678f5e32ff683b43781ced497f7452d243cbaa01f4
MD5 456d46ea1a676e4297d321ba1694c2bf
SHA1 b5f575a22dc940a08e34058e0ed68b010d8cc43a
SHA512 67b5f532e4b5019f20a4b7c569e1370ecd3be4c2b2a4f65b7b5abe0b467fdc7853785ee264c4a074d423a8556de697efd70268fdb54cdffd4c0c5081956d700f
SSDEEP 393216:EuxoF8W31g2G8UDjEwdNrIaA5ZgXs6fVJh0joCV7n5oeH:ENiWm2GTDjDNrIaAas6ZeH
TLSH
T1A91733D695C123F4C3D38609E19B078EB390756AD6979D1A35C5A8022B92C131BCBFBF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_82f60aa98a0fa30b37bc40678f5e32ff683b43781ced497f7452d243cbaa01f4.bin

File Explorer

jaffacakes118_82f60aa98a0fa30b37bc40678f5e32ff683b43781ced497f7452d243cbaa01f4.bin

.exe 18.8MB

jaffacakes118_82f60aa98a0fa30b37bc40678f5e32ff683b43781ced497f7452d243cbaa01f4.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 82f60aa98a0fa30b37bc40678f5e32ff683b43781ced497f7452d243cbaa01f4
MD5 456d46ea1a676e4297d321ba1694c2bf
SHA1 b5f575a22dc940a08e34058e0ed68b010d8cc43a
SHA512 67b5f532e4b5019f20a4b7c569e1370ecd3be4c2b2a4f65b7b5abe0b467fdc7853785ee264c4a074d423a8556de697efd70268fdb54cdffd4c0c5081956d700f
SSDEEP 393216:EuxoF8W31g2G8UDjEwdNrIaA5ZgXs6fVJh0joCV7n5oeH:ENiWm2GTDjDNrIaAas6ZeH
TLSH
T1A91733D695C123F4C3D38609E19B078EB390756AD6979D1A35C5A8022B92C131BCBFBF
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18477800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.+<~

Size

Virtual Size

12.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.sWt

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.RdZ

Size

18.8MB

Virtual Size

18.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_82f60aa98a0fa30b37bc40678f5e32ff683b43781ced497f7452d243cbaa01f4.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic