jaffacakes118_sing-box-1[.]10[.]0-windows-386[.]zip

General

Target
jaffacakes118_sing-box-1.10.0-windows-386.zip
Size 10.8MB
Sample260916-kxpzcsac82
SHA256 434dbb11a8615a38771ca3871d3f85fc0b7e949dd9ea36735da8eb2a98818e92
MD5 9e5ab0dd638b9d0ebe8d23e8a8c311cf
SHA1 7879a50817359c39335d522739305ca69c7e2bf2
SHA512 4064706d99069276644b521acaf639e7516a265d38abcaa73a85f96342e16f33e95e9ca706b70108c843e944b3027bc2ad3e5e6ca82de98249c7189787ec27af
SSDEEP 196608:WV5Pn5dkHGuFj242RhSbo7hAlIBXv3el1+2yiTgYr+B9ddsX3MRA+:WVvd+z242TEowIc8iTg9vA30b
TLSH
T1C1B63386432ED44C82AAFAA47C3DD49C9E15940C06DA57B21D3F7F65533E42EF9AF202
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sing-box-1.10.0-windows-386/sing-box.exe

File Explorer

jaffacakes118_sing-box-1.10.0-windows-386.zip

.zip 10.8MB
sing-box-1.10.0-windows-386/LICENSE

791B
sing-box-1.10.0-windows-386/sing-box.exe

.exe 27.9MB

jaffacakes118_sing-box-1.10.0-windows-386.zip

SHA256 434dbb11a8615a38771ca3871d3f85fc0b7e949dd9ea36735da8eb2a98818e92
MD5 9e5ab0dd638b9d0ebe8d23e8a8c311cf
SHA1 7879a50817359c39335d522739305ca69c7e2bf2
SHA512 4064706d99069276644b521acaf639e7516a265d38abcaa73a85f96342e16f33e95e9ca706b70108c843e944b3027bc2ad3e5e6ca82de98249c7189787ec27af
SSDEEP 196608:WV5Pn5dkHGuFj242RhSbo7hAlIBXv3el1+2yiTgYr+B9ddsX3MRA+:WVvd+z242TEowIc8iTg9vA30b
TLSH
T1C1B63386432ED44C82AAFAA47C3DD49C9E15940C06DA57B21D3F7F65533E42EF9AF202
MD5 SHA1 SHA512 SSDEEP TLSH

sing-box-1.10.0-windows-386/sing-box.exe

IMPHASH c1a56dd2884ebae2645c18b421ad3aee
SHA256 5446829fb7bc06c9a3208ea790ca3766e2a56d751d812d08def60c88d053c6c2
MD5 b6e0bc0dab2e2f6d2fd2dcf62df95447
SHA1 612254a2833bf2932b94ac02801202222c1f5dd0
SHA512 ac24bb26653b362b30de2cf82106b5ffa90c490eec0c4a2105506d93bf78f50501569a44ef29a7aed9fbbd699e2adeffac2dc72908657ac8de01937bf8c597d7
SSDEEP 196608:vj241F4J/zQso52iq/cjeIVS2soObVW6dsY9BgP6qtESwldNkQkJsxAqM:vCFnx/cPA2sBsWdlDdu
TLSH
T183572B41F9DB51F6EA0B483060AB723F17341D068B28DBDBEB957A29FC732924DB6105
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

519680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

13.0MB

Virtual Size

13.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13.1MB

Virtual Size

13.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.1MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

690KB

Virtual Size

690KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_sing-box-1.10.0-windows-386.zip

sing-box-1.10.0-windows-386/LICENSE

sing-box-1.10.0-windows-386/sing-box.exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_sing-box-1.10.0-windows-386.zip

sing-box-1.10.0-windows-386/LICENSE

sing-box-1.10.0-windows-386/sing-box.exe

kernel32

generic