jaffacakes118_90354d93448ca11013441b805be33fd6e97d49838c8330d0ba96be692d56b660[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_90354d93448ca11013441b805be33fd6e97d49838c8330d0ba96be692d56b660.bin
Size 23.5MB
Sample260910-lk68js1ejc
SHA256 90354d93448ca11013441b805be33fd6e97d49838c8330d0ba96be692d56b660
MD5 2f5e46b4d63aecb9c53545bb78c7c733
SHA1 a3cdcd9b0bdee8cdcf4ac61cbc0554e73dc08d0e
SHA512 742c78007ec0814ed1ddaa01b200048cee7e3a821811223aaafeab11f86feed2c61fee3b7727fc85b3050214a1346751452e5c6d7caedfccae42056fa935c700
SSDEEP 393216:ADdRAeYjHy+cDGB2muR0MbKOZSd8+orRYFu0DwllAJnPW5Lv7RpgYKC:ADdRPYfciwmuR0qK5dnorRGu0DwTwPWf
TLSH
T17047239A96D957E8CF8105843A4684CE75D1649EC0FE9D387FCB4C02BA64CAE405EEF3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_90354d93448ca11013441b805be33fd6e97d49838c8330d0ba96be692d56b660.bin

File Explorer

jaffacakes118_90354d93448ca11013441b805be33fd6e97d49838c8330d0ba96be692d56b660.bin

.exe 23.5MB

jaffacakes118_90354d93448ca11013441b805be33fd6e97d49838c8330d0ba96be692d56b660.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 90354d93448ca11013441b805be33fd6e97d49838c8330d0ba96be692d56b660
MD5 2f5e46b4d63aecb9c53545bb78c7c733
SHA1 a3cdcd9b0bdee8cdcf4ac61cbc0554e73dc08d0e
SHA512 742c78007ec0814ed1ddaa01b200048cee7e3a821811223aaafeab11f86feed2c61fee3b7727fc85b3050214a1346751452e5c6d7caedfccae42056fa935c700
SSDEEP 393216:ADdRAeYjHy+cDGB2muR0MbKOZSd8+orRYFu0DwllAJnPW5Lv7RpgYKC:ADdRPYfciwmuR0qK5dnorRGu0DwTwPWf
TLSH
T17047239A96D957E8CF8105843A4684CE75D1649EC0FE9D387FCB4C02BA64CAE405EEF3
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24651782

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

595KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.YN.

Size

Virtual Size

16.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.dZI

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.r9u

Size

23.5MB

Virtual Size

23.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_90354d93448ca11013441b805be33fd6e97d49838c8330d0ba96be692d56b660.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic