jaffacakes118_4e0edd180fc05219c69c049fda42fadf435c48769c612eb8b6afe7f704589944[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_4e0edd180fc05219c69c049fda42fadf435c48769c612eb8b6afe7f704589944.bin
Size 27.4MB
Sample260910-kxxzza1blg
SHA256 4e0edd180fc05219c69c049fda42fadf435c48769c612eb8b6afe7f704589944
MD5 bef7b949fe8bb17974fcab05b220e66b
SHA1 b63d9638aec4ebbe185e48d6c7d285c3384f5627
SHA512 c52035753f5086d183b14acec61740d2a18e9ad25b1fce7b43a85e041a57e286094604deb309c195a5885608260d06846004195455ba694fa3d6744086898590
SSDEEP 786432:JGEpzSrBQQq8f6IH+VGHkcSMqxpQlLTMhd90:YwzGSZk6IeaSjxpmUR0
TLSH
T1CF57335B688C63B8C0C60600609E075E32D1653D46BF5D1D3ACB7C82BB1BE67568BF6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_4e0edd180fc05219c69c049fda42fadf435c48769c612eb8b6afe7f704589944.bin

File Explorer

jaffacakes118_4e0edd180fc05219c69c049fda42fadf435c48769c612eb8b6afe7f704589944.bin

.exe 27.4MB

jaffacakes118_4e0edd180fc05219c69c049fda42fadf435c48769c612eb8b6afe7f704589944.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 4e0edd180fc05219c69c049fda42fadf435c48769c612eb8b6afe7f704589944
MD5 bef7b949fe8bb17974fcab05b220e66b
SHA1 b63d9638aec4ebbe185e48d6c7d285c3384f5627
SHA512 c52035753f5086d183b14acec61740d2a18e9ad25b1fce7b43a85e041a57e286094604deb309c195a5885608260d06846004195455ba694fa3d6744086898590
SSDEEP 786432:JGEpzSrBQQq8f6IH+VGHkcSMqxpQlLTMhd90:YwzGSZk6IeaSjxpmUR0
TLSH
T1CF57335B688C63B8C0C60600609E075E32D1653D46BF5D1D3ACB7C82BB1BE67568BF6B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

54084940

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

7.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ExF

Size

Virtual Size

20.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.)TS

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.8:*

Size

27.4MB

Virtual Size

27.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_4e0edd180fc05219c69c049fda42fadf435c48769c612eb8b6afe7f704589944.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic