jaffacakes118_13bffe1283d85a9a3d8145521fd5956dca5fba70f936b3bdea6d331f7ebf7b7e[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_13bffe1283d85a9a3d8145521fd5956dca5fba70f936b3bdea6d331f7ebf7b7e.bin
Size 21.1MB
Sample260910-jf9f1aga87
SHA256 13bffe1283d85a9a3d8145521fd5956dca5fba70f936b3bdea6d331f7ebf7b7e
MD5 9cc2bfce3d8eceedc2f91fadfba167e3
SHA1 fa6befa632f030f0619071e297368b5df4f03439
SHA512 8f27f0ca307734d61e777e101f48603a8bc75e2f79b51252fdb28a0322efdace447bf4b61d151aaef227058fdde7a9e1f5018a8b23b679d1ca2c909894946e95
SSDEEP 393216:vY+SlVCR8LiHbs8772zEWl9SWl3NXPSWPep3tsRwQ9shKaie589a:HmVCRKy72znl1PSweh+RJmhKaie589
TLSH
T181273393E6DE63DCD793DF409787629921D332B75DA7840E25CE28021522C97CA8ED3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_13bffe1283d85a9a3d8145521fd5956dca5fba70f936b3bdea6d331f7ebf7b7e.bin

File Explorer

jaffacakes118_13bffe1283d85a9a3d8145521fd5956dca5fba70f936b3bdea6d331f7ebf7b7e.bin

.exe 21.1MB

jaffacakes118_13bffe1283d85a9a3d8145521fd5956dca5fba70f936b3bdea6d331f7ebf7b7e.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 13bffe1283d85a9a3d8145521fd5956dca5fba70f936b3bdea6d331f7ebf7b7e
MD5 9cc2bfce3d8eceedc2f91fadfba167e3
SHA1 fa6befa632f030f0619071e297368b5df4f03439
SHA512 8f27f0ca307734d61e777e101f48603a8bc75e2f79b51252fdb28a0322efdace447bf4b61d151aaef227058fdde7a9e1f5018a8b23b679d1ca2c909894946e95
SSDEEP 393216:vY+SlVCR8LiHbs8772zEWl9SWl3NXPSWPep3tsRwQ9shKaie589a:HmVCRKy72znl1PSweh+RJmhKaie589
TLSH
T181273393E6DE63DCD793DF409787629921D332B75DA7840E25CE28021522C97CA8ED3B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20392416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

342KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.\/g

Size

Virtual Size

13.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.U(b

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.%|Q

Size

21.1MB

Virtual Size

21.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_13bffe1283d85a9a3d8145521fd5956dca5fba70f936b3bdea6d331f7ebf7b7e.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic