jaffacakes118_limbo[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_limbo.exe
Size 52KB
Sample260910-ey543sxeka
SHA256 4e847edc6d3c29a12cd9a74edd12ea699d4a96d971667255184a726c9790acad
MD5 0f368123c05afe2c4a2cdafd4b1f3fec
SHA1 17c2e477842b318f99ce1cd24d1d27745e07c4c5
SHA512 a613029d89d5b6caf98f8d03dfa649d156cfb2d966ab3ef9a8837ace21b55f734eaf6b2ae0964403f7aafbc495de408b6fed4bef224922b5ca2900ef4d1bea16
SSDEEP 768:HOvADUXFMPLTfEqTIYv4gKNwFP4iVx/007+o:H6A4X2P3EqTIm4gKN2P4ibx
TLSH
T1C13372D47A999C9AEA14523C40FB9332257DB6E0C7534B036A30B6320E23BE17DD765E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_limbo.exe

File Explorer

jaffacakes118_limbo.exe

.exe 52KB

jaffacakes118_limbo.exe

IMPHASH a4de36b4fc2bedd83f11fc410d1c4339
SHA256 4e847edc6d3c29a12cd9a74edd12ea699d4a96d971667255184a726c9790acad
MD5 0f368123c05afe2c4a2cdafd4b1f3fec
SHA1 17c2e477842b318f99ce1cd24d1d27745e07c4c5
SHA512 a613029d89d5b6caf98f8d03dfa649d156cfb2d966ab3ef9a8837ace21b55f734eaf6b2ae0964403f7aafbc495de408b6fed4bef224922b5ca2900ef4d1bea16
SSDEEP 768:HOvADUXFMPLTfEqTIYv4gKNwFP4iVx/007+o:H6A4X2P3EqTIm4gKN2P4ibx
TLSH
T1C13372D47A999C9AEA14523C40FB9332257DB6E0C7534B036A30B6320E23BE17DD765E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

512B

Virtual Size

329B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

1024B

Virtual Size

546B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

512B

Virtual Size

155B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_limbo.exe

kernel32

msvcrt

generic