jaffacakes118_01e8883c0884dbdcf07c0f5963e4ac99f734a49c5548e03c871891fb72c64adb[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_01e8883c0884dbdcf07c0f5963e4ac99f734a49c5548e03c871891fb72c64adb.bin
Size 1.7MB
Sample260911-3qcdssgg65
SHA256 01e8883c0884dbdcf07c0f5963e4ac99f734a49c5548e03c871891fb72c64adb
MD5 51309b4701c82431aa698d48653fb3f3
SHA1 ab3d7159a787ff9c0fb1028a10e85e86e51934cf
SHA512 e36c4a348fb02c4db06585a5d9fc5bf77896b36377b1bf221c14e32352d824bd60d67d416b49c732d3c02003f924a43eb1727420359c6f6d94f17baa1db843f1
SSDEEP 24576:iafKHUACyPkb1RH65MMgmlhf0uP1ZQGB4+J4MLOsv0IIVOGn0IJsPJd4N:ieUC7a57gml2A1K/MLOC9k0ar
TLSH
T1CB85337887609736D920CAB4E496EA4BB0F6F18B9C5E732B16E4032C7F534DD73A9490
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_01e8883c0884dbdcf07c0f5963e4ac99f734a49c5548e03c871891fb72c64adb.bin

File Explorer

jaffacakes118_01e8883c0884dbdcf07c0f5963e4ac99f734a49c5548e03c871891fb72c64adb.bin

.exe 1.7MB

jaffacakes118_01e8883c0884dbdcf07c0f5963e4ac99f734a49c5548e03c871891fb72c64adb.bin

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 01e8883c0884dbdcf07c0f5963e4ac99f734a49c5548e03c871891fb72c64adb
MD5 51309b4701c82431aa698d48653fb3f3
SHA1 ab3d7159a787ff9c0fb1028a10e85e86e51934cf
SHA512 e36c4a348fb02c4db06585a5d9fc5bf77896b36377b1bf221c14e32352d824bd60d67d416b49c732d3c02003f924a43eb1727420359c6f6d94f17baa1db843f1
SSDEEP 24576:iafKHUACyPkb1RH65MMgmlhf0uP1ZQGB4+J4MLOsv0IIVOGn0IJsPJd4N:ieUC7a57gml2A1K/MLOC9k0ar
TLSH
T1CB85337887609736D920CAB4E496EA4BB0F6F18B9C5E732B16E4032C7F534DD73A9490
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4759552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

147KB

Virtual Size

352KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

qcbxdjwr

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ihvutway

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

jaffacakes118_01e8883c0884dbdcf07c0f5963e4ac99f734a49c5548e03c871891fb72c64adb.bin

kernel32

generic