jaffacakes118_11659052624_bumblebee_7exe_LNK1[.]zip

General

Target
jaffacakes118_11659052624_bumblebee_7exe_LNK1.zip
Size 495KB
Sample260917-wthawshd64
SHA256 e328770748482f2e689f4cd8b4b404fdf549e46fcfe1256775aa577c4758cb46
MD5 d72b04ce966090f645f87dbb4822ace2
SHA1 64109af2508607b517972f780d052342b962866e
SHA512 85c79124a5eafdb22351380feaf94bc6157b5057821874c8775d43f76475d2f48b9e71f50a6c0148c340f70e1716b1aa16f21bf5aa0c42f1465da5d0c1ca8bfe
SSDEEP 12288:5Lb0ulKSl7VQWRCACzptdwbNPNfFduxvw2+0Pc3C:tbblRLRwMbNPNfl2+0ES
TLSH
T15EB4239E606DB141F9754A26CE1DF2B512A4B5B2FEF1FE5FF4803D4A42F8C60A438089
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3432c0d2ce4d108e914ead1d44ea5b46b46f9234c29a55d3e1b5b3739aad61f9

File Explorer

jaffacakes118_11659052624_bumblebee_7exe_LNK1.zip

.zip 495KB
3432c0d2ce4d108e914ead1d44ea5b46b46f9234c29a55d3e1b5b3739aad61f9

.exe 597KB

jaffacakes118_11659052624_bumblebee_7exe_LNK1.zip

SHA256 e328770748482f2e689f4cd8b4b404fdf549e46fcfe1256775aa577c4758cb46
MD5 d72b04ce966090f645f87dbb4822ace2
SHA1 64109af2508607b517972f780d052342b962866e
SHA512 85c79124a5eafdb22351380feaf94bc6157b5057821874c8775d43f76475d2f48b9e71f50a6c0148c340f70e1716b1aa16f21bf5aa0c42f1465da5d0c1ca8bfe
SSDEEP 12288:5Lb0ulKSl7VQWRCACzptdwbNPNfFduxvw2+0Pc3C:tbblRLRwMbNPNfl2+0ES
TLSH
T15EB4239E606DB141F9754A26CE1DF2B512A4B5B2FEF1FE5FF4803D4A42F8C60A438089
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

3432c0d2ce4d108e914ead1d44ea5b46b46f9234c29a55d3e1b5b3739aad61f9

IMPHASH 7e5590227ad3aecb2feedda5da4da1cb
SHA256 3432c0d2ce4d108e914ead1d44ea5b46b46f9234c29a55d3e1b5b3739aad61f9
MD5 979851f3a98249e8e6057ee8af13c1e5
SHA1 9d404dc0394153874cd7dcc1941a38ba4eb2e0a0
SHA512 23784538c2981f2dcdce831e63b13fe3ce41849c14eac2b51c35a4b01bf272dca429559185683f1f9adaa7bc810ddb2fc1e4c35e6d370f976085fa932feb7143
SSDEEP 12288:NcVlh7vQGJWkywPs+5bCbjMlMLM+KVl3z9rC:OV37vQGJWkywPsQJl8KDz9rC
TLSH
T12BD4C04FE8A5FFEAC41D51B6C88F03A95267A6806F06097B651D428832E3B03B3D775D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

32832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

jaffacakes118_11659052624_bumblebee_7exe_LNK1.zip

3432c0d2ce4d108e914ead1d44ea5b46b46f9234c29a55d3e1b5b3739aad61f9

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_11659052624_bumblebee_7exe_LNK1.zip

3432c0d2ce4d108e914ead1d44ea5b46b46f9234c29a55d3e1b5b3739aad61f9

kernel32

generic