jaffacakes118_a0a1638eb636d4ada85fa3aa19e884144cf3ed207b8615ac867193352f76efbb[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_a0a1638eb636d4ada85fa3aa19e884144cf3ed207b8615ac867193352f76efbb.bin
Size 52KB
Sample260922-j82lvsbf79
SHA256 a0a1638eb636d4ada85fa3aa19e884144cf3ed207b8615ac867193352f76efbb
MD5 dc65d77cb1dd726c2e046a4e34d17329
SHA1 8031920eafe4c6170d44301165b1098869af60c3
SHA512 d0bb2499d2d5c51c307e02bc723b1bd162e5d47e10123440ac8ac296fb1a11998f8ebdd08b5e225b857d0e1c5b12fe0d56006a11e07466890e613cd454e04033
SSDEEP 1536:Qb0qZj/S9Rz+ktBj9O9OKPLRRTlYQVX2ep:Q1ZjadGOKj3TlYQVX2
TLSH
T15B330A45EB4381F7CC671437D6A3E72B4A22D600E42DCFD9DF5A485BC80A3B3169A972
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_a0a1638eb636d4ada85fa3aa19e884144cf3ed207b8615ac867193352f76efbb.bin

File Explorer

jaffacakes118_a0a1638eb636d4ada85fa3aa19e884144cf3ed207b8615ac867193352f76efbb.bin

.dll 52KB

jaffacakes118_a0a1638eb636d4ada85fa3aa19e884144cf3ed207b8615ac867193352f76efbb.bin

IMPHASH 49f651cacb26e054c95ae96180677340
SHA256 a0a1638eb636d4ada85fa3aa19e884144cf3ed207b8615ac867193352f76efbb
MD5 dc65d77cb1dd726c2e046a4e34d17329
SHA1 8031920eafe4c6170d44301165b1098869af60c3
SHA512 d0bb2499d2d5c51c307e02bc723b1bd162e5d47e10123440ac8ac296fb1a11998f8ebdd08b5e225b857d0e1c5b12fe0d56006a11e07466890e613cd454e04033
SSDEEP 1536:Qb0qZj/S9Rz+ktBj9O9OKPLRRTlYQVX2ep:Q1ZjadGOKj3TlYQVX2
TLSH
T15B330A45EB4381F7CC671437D6A3E72B4A22D600E42DCFD9DF5A485BC80A3B3169A972
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

libjpeg-62

jpeg_CreateCompress jpeg_destroy_compress jpeg_finish_compress jpeg_set_defaults jpeg_set_quality jpeg_start_compress jpeg_std_error jpeg_stdio_dest jpeg_write_scanlines

libpng-3

png_create_info_struct png_create_write_struct png_destroy_write_struct png_get_io_ptr png_set_IHDR png_set_compression_level png_set_filter png_set_write_fn png_write_end png_write_image png_write_info

sdl2

SDL_ConvertSurfaceFormat SDL_FreeSurface SDL_RWFromFile SDL_SaveBMP_RW SDL_SetError

sdl2_image

IMG_Init IMG_LoadTyped_RW IMG_Load_RW IMG_Quit

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcr90

__dllonexit _amsg_exit _assert _exit _initterm _iob _lock _onexit _setjmp3 _snwprintf _unlock abort calloc fclose fopen free fwprintf fwrite malloc memcmp memcpy raise strlen strncmp vfprintf wcscpy

user32

MessageBoxW

python27

PyByteArray_Type PyCFunction_NewEx PyCFunction_Type PyCapsule_GetName PyCapsule_GetPointer PyCapsule_IsValid PyCode_New PyDict_GetItem PyDict_GetItemString PyDict_New PyDict_Next PyDict_SetItem PyDict_Size PyErr_ExceptionMatches PyErr_Format PyErr_NormalizeException PyErr_Occurred PyErr_SetString PyErr_WarnEx PyEval_RestoreThread PyEval_SaveThread PyExc_AttributeError PyExc_BaseException PyExc_ImportError PyExc_NameError PyExc_RuntimeError PyExc_SystemError PyExc_TypeError PyExc_ValueError PyFrame_New PyImport_AddModule PyImport_Import PyInt_AsSsize_t PyInt_FromLong PyInt_FromSsize_t PyInt_Type PyList_New PyList_Type PyLong_AsLong PyLong_AsSsize_t PyLong_Type PyMem_Malloc PyMem_Realloc PyMethod_Type PyModule_GetDict PyModule_GetName PyNumber_Index PyNumber_Int PyNumber_Long PyOS_snprintf PyObject_Call PyObject_CallFunctionObjArgs PyObject_GetAttr PyObject_GetAttrString PyObject_GetItem PyObject_IsInstance PyObject_IsTrue PyObject_RichCompare PyObject_SetAttrString PySlice_New PyString_AsString PyString_AsStringAndSize PyString_Format PyString_FromFormat PyString_FromString PyString_FromStringAndSize PyString_InternFromString PyString_Type PyTraceBack_Here PyTraceBack_Type PyTuple_New PyTuple_Pack PyTuple_Type PyType_IsSubtype PyUnicodeUCS2_Compare PyUnicodeUCS2_DecodeUTF8 Py_GetVersion Py_InitModule4 _PyByteArray_empty_string _PyString_Eq _PyThreadState_Current _Py_CheckRecursionLimit _Py_CheckRecursiveCall _Py_NoneStruct _Py_TrueStruct _Py_ZeroStruct

Name

.text

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

70B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

676B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_a0a1638eb636d4ada85fa3aa19e884144cf3ed207b8615ac867193352f76efbb.bin

libjpeg-62

libpng-3

sdl2

sdl2_image

kernel32

msvcr90

user32

python27

generic