jaffacakes118_8b84cdd887700df889c7169f0fbd34f0d81c7ea86dd4eb8370781b8fb126e596[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_8b84cdd887700df889c7169f0fbd34f0d81c7ea86dd4eb8370781b8fb126e596.bin
Size 25.2MB
Sample260910-ck4b8acp3t
SHA256 8b84cdd887700df889c7169f0fbd34f0d81c7ea86dd4eb8370781b8fb126e596
MD5 8795d5f9daa2b6ab972e2b024d9ab494
SHA1 3c86468e0666551f6cbf40edee533a070b567752
SHA512 cd080bd61d32d54e9102b4355ed22f2396346251ed2e2c3c3bb750fd42fb06b04781f4e198dc3c630933e4660a4aa2c0117ac4d6773d98a595446d8c185894ff
SSDEEP 786432:dAUJOLzhJ00PWi3nGThWItlaIRZD75/ZJV3/P7:dAxzhCi2TV1ZD1vV37
TLSH
T1D14733E569D053E8EAD34D40B30F36CDA0D375376AE6581C7AD61C025B30DAA9A0ADF3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_8b84cdd887700df889c7169f0fbd34f0d81c7ea86dd4eb8370781b8fb126e596.bin

File Explorer

jaffacakes118_8b84cdd887700df889c7169f0fbd34f0d81c7ea86dd4eb8370781b8fb126e596.bin

.exe 25.2MB

jaffacakes118_8b84cdd887700df889c7169f0fbd34f0d81c7ea86dd4eb8370781b8fb126e596.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 8b84cdd887700df889c7169f0fbd34f0d81c7ea86dd4eb8370781b8fb126e596
MD5 8795d5f9daa2b6ab972e2b024d9ab494
SHA1 3c86468e0666551f6cbf40edee533a070b567752
SHA512 cd080bd61d32d54e9102b4355ed22f2396346251ed2e2c3c3bb750fd42fb06b04781f4e198dc3c630933e4660a4aa2c0117ac4d6773d98a595446d8c185894ff
SSDEEP 786432:dAUJOLzhJ00PWi3nGThWItlaIRZD75/ZJV3/P7:dAxzhCi2TV1ZD1vV37
TLSH
T1D14733E569D053E8EAD34D40B30F36CDA0D375376AE6581C7AD61C025B30DAA9A0ADF3
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

49687800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

883KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.DKE

Size

Virtual Size

18.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.-&=

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.X""

Size

25.2MB

Virtual Size

25.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_8b84cdd887700df889c7169f0fbd34f0d81c7ea86dd4eb8370781b8fb126e596.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic