jaffacakes118_f56186f0aa41c033beaeca3237a1f60954f5055e58f683682ea54fa8082ab745[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_f56186f0aa41c033beaeca3237a1f60954f5055e58f683682ea54fa8082ab745.bin
Size 22.5MB
Sample260910-h77k2sga66
SHA256 f56186f0aa41c033beaeca3237a1f60954f5055e58f683682ea54fa8082ab745
MD5 5000688277c68e7b2d0cf1bee8ec34d4
SHA1 eafd7e7f99efc2668f81905f2528aed08f27eaad
SHA512 85b231fcb28ea6f34cb38244836b26d99b19e0bb3ebdc77e9302267c215a66844153726ad9971660e04cbcc448d0f90e6dc77ce62021402354e82a9abb7ec5ed
SSDEEP 393216:2P13jziJRf9KNEdqoFG6nbEjCrQrzUh2A0GU9nmf7B9GyYoZGpClPlzTKXBSe0ps:spzgR/XFBnNQ/UhrBbYWdzTOKs
TLSH
T11437330BB6EBE3E5CB4359842A0911CD34D5A1CD81FE463936CF5905F560EAA06CEEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_f56186f0aa41c033beaeca3237a1f60954f5055e58f683682ea54fa8082ab745.bin

File Explorer

jaffacakes118_f56186f0aa41c033beaeca3237a1f60954f5055e58f683682ea54fa8082ab745.bin

.exe 22.5MB

jaffacakes118_f56186f0aa41c033beaeca3237a1f60954f5055e58f683682ea54fa8082ab745.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 f56186f0aa41c033beaeca3237a1f60954f5055e58f683682ea54fa8082ab745
MD5 5000688277c68e7b2d0cf1bee8ec34d4
SHA1 eafd7e7f99efc2668f81905f2528aed08f27eaad
SHA512 85b231fcb28ea6f34cb38244836b26d99b19e0bb3ebdc77e9302267c215a66844153726ad9971660e04cbcc448d0f90e6dc77ce62021402354e82a9abb7ec5ed
SSDEEP 393216:2P13jziJRf9KNEdqoFG6nbEjCrQrzUh2A0GU9nmf7B9GyYoZGpClPlzTKXBSe0ps:spzgR/XFBnNQ/UhrBbYWdzTOKs
TLSH
T11437330BB6EBE3E5CB4359842A0911CD34D5A1CD81FE463936CF5905F560EAA06CEEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24603921

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

530KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.+:6

Size

Virtual Size

15.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.pGp

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.N+d

Size

22.5MB

Virtual Size

22.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_f56186f0aa41c033beaeca3237a1f60954f5055e58f683682ea54fa8082ab745.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic