jaffacakes118_13ad79ad110845a925b2890dd9fa676e37f00c5b03d7c9245c42927c5701bfcb[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_13ad79ad110845a925b2890dd9fa676e37f00c5b03d7c9245c42927c5701bfcb.bin
Size 22.9MB
Sample260910-ckbl7swsav
SHA256 13ad79ad110845a925b2890dd9fa676e37f00c5b03d7c9245c42927c5701bfcb
MD5 52be8b10d2c53522ac715b8794039fee
SHA1 8e40f8d3919156b4bd687b802a8afa80f880aabe
SHA512 cbffc4fc8c6ea85f1ae1d751d671d7c6da8fbc26eb0f6cda3413c9c4b2b0f151f4b54735e406226c06af059377f0ac2fdc0a23b20b90f414adc636d8715dece2
SSDEEP 393216:cUDWUMenDf+TUUpyVhv7bcL0rM2euSWTGDPcro+fJvfnbp:ccWUMUwUUpyVhv74L0CuUUT
TLSH
T1133733BA52C8A7CE93C22948794941DA70C4B85D84FD99187FC72C0BD638DBB114EEB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_13ad79ad110845a925b2890dd9fa676e37f00c5b03d7c9245c42927c5701bfcb.bin

File Explorer

jaffacakes118_13ad79ad110845a925b2890dd9fa676e37f00c5b03d7c9245c42927c5701bfcb.bin

.exe 22.9MB

jaffacakes118_13ad79ad110845a925b2890dd9fa676e37f00c5b03d7c9245c42927c5701bfcb.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 13ad79ad110845a925b2890dd9fa676e37f00c5b03d7c9245c42927c5701bfcb
MD5 52be8b10d2c53522ac715b8794039fee
SHA1 8e40f8d3919156b4bd687b802a8afa80f880aabe
SHA512 cbffc4fc8c6ea85f1ae1d751d671d7c6da8fbc26eb0f6cda3413c9c4b2b0f151f4b54735e406226c06af059377f0ac2fdc0a23b20b90f414adc636d8715dece2
SSDEEP 393216:cUDWUMenDf+TUUpyVhv7bcL0rM2euSWTGDPcro+fJvfnbp:ccWUMUwUUpyVhv74L0CuUUT
TLSH
T1133733BA52C8A7CE93C22948794941DA70C4B85D84FD99187FC72C0BD638DBB114EEB7
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

44289327

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

812KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.R6_

Size

Virtual Size

16.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rAg

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.1EE

Size

22.9MB

Virtual Size

22.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_13ad79ad110845a925b2890dd9fa676e37f00c5b03d7c9245c42927c5701bfcb.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic