jaffacakes118_e09c97cd05e6c726b2c3df32ef20122634424563e6eddc9397c27834f0101f65[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_e09c97cd05e6c726b2c3df32ef20122634424563e6eddc9397c27834f0101f65.bin
Size 1.7MB
Sample260912-epldbada34
SHA256 e09c97cd05e6c726b2c3df32ef20122634424563e6eddc9397c27834f0101f65
MD5 a64336da68ce6ac169834ea0467f6d9d
SHA1 87787a544d88253ace866e48d676cfc5411f4d08
SHA512 8a8c5ef1a43a944438eb633077acb4ea23d34732dc37ff8600752ddd1db08ff24342f7930765c65f3a345d84cecb2fda521388071ffe382577a6dffb949d4b98
SSDEEP 49152:KBDpyIs3yDxvvQ6Bd79wgZkvxkHvhIgp09XN+BbS3Gs:KxA3yDl5BN9woOQYG
TLSH
T1B9853317CE01A477FA4A8BFA499F80331DB0C25C1B4167EBADC4B84DF507A46AB5721E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_e09c97cd05e6c726b2c3df32ef20122634424563e6eddc9397c27834f0101f65.bin

File Explorer

jaffacakes118_e09c97cd05e6c726b2c3df32ef20122634424563e6eddc9397c27834f0101f65.bin

.exe 1.7MB

jaffacakes118_e09c97cd05e6c726b2c3df32ef20122634424563e6eddc9397c27834f0101f65.bin

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 e09c97cd05e6c726b2c3df32ef20122634424563e6eddc9397c27834f0101f65
MD5 a64336da68ce6ac169834ea0467f6d9d
SHA1 87787a544d88253ace866e48d676cfc5411f4d08
SHA512 8a8c5ef1a43a944438eb633077acb4ea23d34732dc37ff8600752ddd1db08ff24342f7930765c65f3a345d84cecb2fda521388071ffe382577a6dffb949d4b98
SSDEEP 49152:KBDpyIs3yDxvvQ6Bd79wgZkvxkHvhIgp09XN+BbS3Gs:KxA3yDl5BN9woOQYG
TLSH
T1B9853317CE01A477FA4A8BFA499F80331DB0C25C1B4167EBADC4B84DF507A46AB5721E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4648960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

148KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

804B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

wttsnmvs

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pienbxvt

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

jaffacakes118_e09c97cd05e6c726b2c3df32ef20122634424563e6eddc9397c27834f0101f65.bin

kernel32

generic