jaffacakes118_cd9a5f1dc0673f4f075bb0ce355980a53b62dfc7e07d5be702cf56037d0f2f55[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_cd9a5f1dc0673f4f075bb0ce355980a53b62dfc7e07d5be702cf56037d0f2f55.bin
Size 29KB
Sample260910-yfgtbavfpd
SHA256 cd9a5f1dc0673f4f075bb0ce355980a53b62dfc7e07d5be702cf56037d0f2f55
MD5 1b1d3964892c22b63cac677d5f9ee9d8
SHA1 2de93e2240d77bea59731c8293e66aca462076ee
SHA512 b79655628a36c310bef96f5d4d5620aef3ae2b2bc6990250816a329ef51d47bb3a76658fd218ed716c545be27db6263015a4b4a85bd3a525c23e157c50ee31c9
SSDEEP 768:6SyJIBSNxAq1/VPRMzZhSM9og1gsNhuvsCWo:6hI5o2zsa7uvUo
TLSH
T14DD2D00751906F38FAFC09369F3B9955207EB8360FB5C3946B96544E2890883BDBCBE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_cd9a5f1dc0673f4f075bb0ce355980a53b62dfc7e07d5be702cf56037d0f2f55.bin
unpack001/out.upx

File Explorer

jaffacakes118_cd9a5f1dc0673f4f075bb0ce355980a53b62dfc7e07d5be702cf56037d0f2f55.bin

.exe 29KB
out.upx

.exe 60KB

jaffacakes118_cd9a5f1dc0673f4f075bb0ce355980a53b62dfc7e07d5be702cf56037d0f2f55.bin

SHA256 cd9a5f1dc0673f4f075bb0ce355980a53b62dfc7e07d5be702cf56037d0f2f55
MD5 1b1d3964892c22b63cac677d5f9ee9d8
SHA1 2de93e2240d77bea59731c8293e66aca462076ee
SHA512 b79655628a36c310bef96f5d4d5620aef3ae2b2bc6990250816a329ef51d47bb3a76658fd218ed716c545be27db6263015a4b4a85bd3a525c23e157c50ee31c9
SSDEEP 768:6SyJIBSNxAq1/VPRMzZhSM9og1gsNhuvsCWo:6hI5o2zsa7uvUo
TLSH
T14DD2D00751906F38FAFC09369F3B9955207EB8360FB5C3946B96544E2890883BDBCBE1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

100496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 e13f4df98f0aff28e55179aa78bb472ff579eff7a2d07aa22df23c97cf250165
MD5 3a8bcd0159a6e064ffd0db40759e1699
SHA1 5dd7659035953f355386e82b0cb23fbcd5db5299
SHA512 5f302cca5f4a70c13d5e5983eaa5ab4b6235527138840ffaf07af76593fb2fc96f2f3d97ca2f4314ca52c54c042909a945985872bdac4e2ec4913ed1d845cd8c
SSDEEP 768:xvOrYLKKT+Br2yKm/JgS/hUQ0uQu0hseXFRxULUlB9eXDpuv11bMcRx0f/I:lOrI5yKCJhKPrBcYlgDEv1Rb0fg
TLSH
T1AC532C16B34354BCC61AD5B086EFAB33B672B89306719F3F13A4E7302E11E605F6A914
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

944B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_cd9a5f1dc0673f4f075bb0ce355980a53b62dfc7e07d5be702cf56037d0f2f55.bin

generic

out.upx

generic