jaffacakes118_a7c069532b8194688a05e0aca911a01e4302b8e20e48589269334aa095bc05c8[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_a7c069532b8194688a05e0aca911a01e4302b8e20e48589269334aa095bc05c8.bin
Size 18.4MB
Sample260910-n191gswvct
SHA256 a7c069532b8194688a05e0aca911a01e4302b8e20e48589269334aa095bc05c8
MD5 e776ffe6cc4591d4d8c7410d040f0ea0
SHA1 a02848a29475ad3480b443ecc88250224c383e12
SHA512 eacee79ac7d70d680941c33a4fa06442d8edbfde05970e0fde4766054b8404e07fa9bacd63433950fbf6f9498cb8d3cf4592409ee6141a918fb29c7fc477842d
SSDEEP 393216:l4cPMtudZuQHvKP0MnSJwQI/FDLBB9wMAjS7adfk5Q6aIrdTqlMDXpbtQojSH3V:l4A/dZfC8/JwDDLnqM7GFkIuWlMXpiwS
TLSH
T11E1723D49680A7F59783860D659F1387F2D0698BE1BB9A093EC3A80373D0C47574BEB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_a7c069532b8194688a05e0aca911a01e4302b8e20e48589269334aa095bc05c8.bin

File Explorer

jaffacakes118_a7c069532b8194688a05e0aca911a01e4302b8e20e48589269334aa095bc05c8.bin

.exe 18.4MB

jaffacakes118_a7c069532b8194688a05e0aca911a01e4302b8e20e48589269334aa095bc05c8.bin

IMPHASH ef17d38bdf1303076efd1933c3e21c20
SHA256 a7c069532b8194688a05e0aca911a01e4302b8e20e48589269334aa095bc05c8
MD5 e776ffe6cc4591d4d8c7410d040f0ea0
SHA1 a02848a29475ad3480b443ecc88250224c383e12
SHA512 eacee79ac7d70d680941c33a4fa06442d8edbfde05970e0fde4766054b8404e07fa9bacd63433950fbf6f9498cb8d3cf4592409ee6141a918fb29c7fc477842d
SSDEEP 393216:l4cPMtudZuQHvKP0MnSJwQI/FDLBB9wMAjS7adfk5Q6aIrdTqlMDXpbtQojSH3V:l4A/dZfC8/JwDDLnqM7GFkIuWlMXpiwS
TLSH
T11E1723D49680A7F59783860D659F1387F2D0698BE1BB9A093EC3A80373D0C47574BEB6
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29785045

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

223KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.V[V

Size

Virtual Size

11.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.sr1

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fua

Size

18.4MB

Virtual Size

18.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_a7c069532b8194688a05e0aca911a01e4302b8e20e48589269334aa095bc05c8.bin

kernel32

user32

advapi32

shell32

winhttp

d3d11

generic