jaffacakes118_d8b17e0f1fe15837a2bb282707c80e8e28ed15c53cf4b014c6e7c314b5d0e463[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_d8b17e0f1fe15837a2bb282707c80e8e28ed15c53cf4b014c6e7c314b5d0e463.bin
Size 21.8MB
Sample260910-bhytaavyex
SHA256 d8b17e0f1fe15837a2bb282707c80e8e28ed15c53cf4b014c6e7c314b5d0e463
MD5 f30d57b17f3a628455473d619bff1680
SHA1 06ac0bcbd0039f94abaf04dbdfc3c091519013d1
SHA512 cddac308fc085f6c3ac112cc7c54d08020cbdeda7ddcb0d653b6671809aa0efc7c1408c2db497cae0b3fe7034e433531382bb55ac202ef4be82a90892b13118e
SSDEEP 393216:xV3rsRzc0Ho44qb3ncCde7Jee0Xfvjte2imVq0HM+MdfpbUWtl+w:spDHV4qb387keOjtUq/YfWW+
TLSH
T19537336FA4D5D3E48B8606943A4605CD34F5A06E81EE9E3837CF9C12F570E2D0699EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_d8b17e0f1fe15837a2bb282707c80e8e28ed15c53cf4b014c6e7c314b5d0e463.bin

File Explorer

jaffacakes118_d8b17e0f1fe15837a2bb282707c80e8e28ed15c53cf4b014c6e7c314b5d0e463.bin

.exe 21.8MB

jaffacakes118_d8b17e0f1fe15837a2bb282707c80e8e28ed15c53cf4b014c6e7c314b5d0e463.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 d8b17e0f1fe15837a2bb282707c80e8e28ed15c53cf4b014c6e7c314b5d0e463
MD5 f30d57b17f3a628455473d619bff1680
SHA1 06ac0bcbd0039f94abaf04dbdfc3c091519013d1
SHA512 cddac308fc085f6c3ac112cc7c54d08020cbdeda7ddcb0d653b6671809aa0efc7c1408c2db497cae0b3fe7034e433531382bb55ac202ef4be82a90892b13118e
SSDEEP 393216:xV3rsRzc0Ho44qb3ncCde7Jee0Xfvjte2imVq0HM+MdfpbUWtl+w:spDHV4qb387keOjtUq/YfWW+
TLSH
T19537336FA4D5D3E48B8606943A4605CD34F5A06E81EE9E3837CF9C12F570E2D0699EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27558844

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

634KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.M%U

Size

Virtual Size

15.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.>v#

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Xh)

Size

21.8MB

Virtual Size

21.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_d8b17e0f1fe15837a2bb282707c80e8e28ed15c53cf4b014c6e7c314b5d0e463.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic