jaffacakes118_1bad90606a9ae04e6b6d6c6e1df892d3333ce69661c8b3920d5eb83bcc3ffb72[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_1bad90606a9ae04e6b6d6c6e1df892d3333ce69661c8b3920d5eb83bcc3ffb72.bin
Size 25.7MB
Sample260910-mg52ra1gnc
SHA256 1bad90606a9ae04e6b6d6c6e1df892d3333ce69661c8b3920d5eb83bcc3ffb72
MD5 70000770b01b7da73b0d86f5befe7f80
SHA1 be777db856bbb5ab3e3c01ffb5cf9763351ca03e
SHA512 2619632a2f06a1241b00c78dbc434cbde5dda269210c26ed4c2ded540a290217329e743cad428b3c964c3b265f58168371378210b25d4f8285efcf9b0610029b
SSDEEP 393216:YTpjA7SVhDDPYjIjBvTY9ZCEB3jE0n7cgvNBsTBjz3EnkknuKHQOjw7fOg8d5RP7:oM2VRDPYImlBQtQup8w7fOp5cIDzub
TLSH
T1C54733763CC47194D0F74501A28F53BEB0B3963946DE6C0E23D62A016F12DABAB47D6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_1bad90606a9ae04e6b6d6c6e1df892d3333ce69661c8b3920d5eb83bcc3ffb72.bin

File Explorer

jaffacakes118_1bad90606a9ae04e6b6d6c6e1df892d3333ce69661c8b3920d5eb83bcc3ffb72.bin

.exe 25.7MB

jaffacakes118_1bad90606a9ae04e6b6d6c6e1df892d3333ce69661c8b3920d5eb83bcc3ffb72.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 1bad90606a9ae04e6b6d6c6e1df892d3333ce69661c8b3920d5eb83bcc3ffb72
MD5 70000770b01b7da73b0d86f5befe7f80
SHA1 be777db856bbb5ab3e3c01ffb5cf9763351ca03e
SHA512 2619632a2f06a1241b00c78dbc434cbde5dda269210c26ed4c2ded540a290217329e743cad428b3c964c3b265f58168371378210b25d4f8285efcf9b0610029b
SSDEEP 393216:YTpjA7SVhDDPYjIjBvTY9ZCEB3jE0n7cgvNBsTBjz3EnkknuKHQOjw7fOg8d5RP7:oM2VRDPYImlBQtQup8w7fOp5cIDzub
TLSH
T1C54733763CC47194D0F74501A28F53BEB0B3963946DE6C0E23D62A016F12DABAB47D6B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47564839

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

6.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1017KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.dx7

Size

Virtual Size

19.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.?SI

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.X7H

Size

25.7MB

Virtual Size

25.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_1bad90606a9ae04e6b6d6c6e1df892d3333ce69661c8b3920d5eb83bcc3ffb72.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic