jaffacakes118_3cc4c2024f00380e9e403f21554fc1d33d33046386d1f8429e9c81e3953925c0[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_3cc4c2024f00380e9e403f21554fc1d33d33046386d1f8429e9c81e3953925c0.bin
Size 38KB
Sample260922-j84ffsbf82
SHA256 3cc4c2024f00380e9e403f21554fc1d33d33046386d1f8429e9c81e3953925c0
MD5 41157d086419658ade01734e3991b95c
SHA1 5c5206bba2c8d3a9eea622dbc79423dac285b267
SHA512 73d823555d3e5221f47823295d9efca093f77d2747d75046b0d42976ca8ba3c71870cca65aa49066ebf9a55842c44a6b3b9b93f9ff08a235c46502bb75f8a585
SSDEEP 768:FDzL961cneIIjDwPRUy4+ph8i76J4q7XcIjVkDa3xuS/lS8aYB4sKshXiKpBHd:FD/81ijES8a8rhXiKp3
TLSH
T11D03F6C1E95780F3E889507BA69EB73F0FE3E785D4614EC9C159AC87BC095B38B69102
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_3cc4c2024f00380e9e403f21554fc1d33d33046386d1f8429e9c81e3953925c0.bin

File Explorer

jaffacakes118_3cc4c2024f00380e9e403f21554fc1d33d33046386d1f8429e9c81e3953925c0.bin

.dll 38KB

jaffacakes118_3cc4c2024f00380e9e403f21554fc1d33d33046386d1f8429e9c81e3953925c0.bin

IMPHASH 7fafa38ef8e902db792176c6a013ab96
SHA256 3cc4c2024f00380e9e403f21554fc1d33d33046386d1f8429e9c81e3953925c0
MD5 41157d086419658ade01734e3991b95c
SHA1 5c5206bba2c8d3a9eea622dbc79423dac285b267
SHA512 73d823555d3e5221f47823295d9efca093f77d2747d75046b0d42976ca8ba3c71870cca65aa49066ebf9a55842c44a6b3b9b93f9ff08a235c46502bb75f8a585
SSDEEP 768:FDzL961cneIIjDwPRUy4+ph8i76J4q7XcIjVkDa3xuS/lS8aYB4sKshXiKpBHd:FD/81ijES8a8rhXiKp3
TLSH
T11D03F6C1E95780F3E889507BA69EB73F0FE3E785D4614EC9C159AC87BC095B38B69102
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

sdl2

SDL_InitSubSystem SDL_JoystickClose SDL_JoystickGetAxis SDL_JoystickGetBall SDL_JoystickGetButton SDL_JoystickGetHat SDL_JoystickInstanceID SDL_JoystickName SDL_JoystickNumAxes SDL_JoystickNumBalls SDL_JoystickNumButtons SDL_JoystickNumHats SDL_JoystickOpen SDL_NumJoysticks SDL_QuitSubSystem SDL_WasInit

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcr90

__dllonexit _amsg_exit _initterm _iob _lock _onexit _unlock abort calloc free fwrite malloc memcpy strlen strncmp vfprintf

python27

PyBaseObject_Type PyCFunction_NewEx PyCFunction_Type PyCode_New PyDict_GetItem PyDict_New PyDict_Next PyDict_SetItem PyDict_Size PyErr_ExceptionMatches PyErr_Format PyErr_NormalizeException PyErr_Occurred PyErr_SetString PyErr_WarnEx PyExc_AttributeError PyExc_BaseException PyExc_ImportError PyExc_NameError PyExc_SystemError PyExc_TypeError PyFloat_FromDouble PyFrame_New PyImport_AddModule PyInt_FromLong PyList_New PyLong_AsLong PyMem_Malloc PyMem_Realloc PyMethod_Type PyModule_GetDict PyNumber_Int PyNumber_Long PyOS_snprintf PyObject_Call PyObject_CallFunctionObjArgs PyObject_ClearWeakRefs PyObject_GetAttr PyObject_SetAttrString PyString_AsString PyString_FromFormat PyString_FromString PyString_FromStringAndSize PyString_InternFromString PyString_Type PyTraceBack_Here PyTraceBack_Type PyTuple_New PyTuple_Pack PyType_IsSubtype PyType_Ready PyUnicodeUCS2_Compare PyUnicodeUCS2_DecodeUTF8 Py_GetVersion Py_InitModule4 _PyString_Eq _PyThreadState_Current _Py_CheckRecursionLimit _Py_CheckRecursiveCall _Py_NoneStruct _Py_TrueStruct _Py_ZeroStruct

Name

.text

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

76B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

676B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_3cc4c2024f00380e9e403f21554fc1d33d33046386d1f8429e9c81e3953925c0.bin

sdl2

kernel32

msvcr90

python27

generic