jaffacakes118_0bbf6f75b86ae1178d59d8374c1352860bc03e7d9095c5b5e7c7da7117d6a912[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_0bbf6f75b86ae1178d59d8374c1352860bc03e7d9095c5b5e7c7da7117d6a912.bin
Size 21.3MB
Sample260910-l49ssavtbx
SHA256 0bbf6f75b86ae1178d59d8374c1352860bc03e7d9095c5b5e7c7da7117d6a912
MD5 57100c22d90ad5e4023185505666ded7
SHA1 4b44868c0db517085ed40eb14ed68f0efa5a45a6
SHA512 f2bdfc210eb66213e3b447c4a24d03fb960978d4a4a2aa25bbd8ac39cd0ddac99d0f87175752c1422f29227382ebd42f1ff4534b58d888a33dbff356c311f7dc
SSDEEP 393216:NoBZz0pikSD8qw0Y7h5Onxn4SkkensXwUkoziMm:NoBxwSD8bz7hoxn/kF2wUkozz
TLSH
T16D3733577DE9B1D8D3D39F01E787728AA0C1B36E4DA7862E39C618033620D978A49D37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_0bbf6f75b86ae1178d59d8374c1352860bc03e7d9095c5b5e7c7da7117d6a912.bin

File Explorer

jaffacakes118_0bbf6f75b86ae1178d59d8374c1352860bc03e7d9095c5b5e7c7da7117d6a912.bin

.exe 21.3MB

jaffacakes118_0bbf6f75b86ae1178d59d8374c1352860bc03e7d9095c5b5e7c7da7117d6a912.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 0bbf6f75b86ae1178d59d8374c1352860bc03e7d9095c5b5e7c7da7117d6a912
MD5 57100c22d90ad5e4023185505666ded7
SHA1 4b44868c0db517085ed40eb14ed68f0efa5a45a6
SHA512 f2bdfc210eb66213e3b447c4a24d03fb960978d4a4a2aa25bbd8ac39cd0ddac99d0f87175752c1422f29227382ebd42f1ff4534b58d888a33dbff356c311f7dc
SSDEEP 393216:NoBZz0pikSD8qw0Y7h5Onxn4SkkensXwUkoziMm:NoBxwSD8bz7hoxn/kF2wUkozz
TLSH
T16D3733577DE9B1D8D3D39F01E787728AA0C1B36E4DA7862E39C618033620D978A49D37
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23752309

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

384KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.r[N

Size

Virtual Size

14.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.dX

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.3-z

Size

21.3MB

Virtual Size

21.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_0bbf6f75b86ae1178d59d8374c1352860bc03e7d9095c5b5e7c7da7117d6a912.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic