jaffacakes118_e65815eb650476eff43821b53ef1dba3b7080109c248cfc3e192859dc29a6f2f[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_e65815eb650476eff43821b53ef1dba3b7080109c248cfc3e192859dc29a6f2f.bin
Size 56KB
Sample260922-j9bf3abf85
SHA256 e65815eb650476eff43821b53ef1dba3b7080109c248cfc3e192859dc29a6f2f
MD5 07a34d7447751d210b3499de94670bde
SHA1 0a8adc54b0af51b465a7c0924e3a533ad6016071
SHA512 ef8d86d53c21ff406f753e30872197a07e729dd2bf01fb047d520eedb4ec4c661ba9b86da09b3b92f7a720994cc83838d85a1785756d340afd1932d6ab92ba5c
SSDEEP 768:mHwML5dJmX6ZnWPAIWQVVjXORklO1jfVUpcMw4FxD:6wCBZsAIvV7YjfKpM4FxD
TLSH
T13843E744FE47D8FACC961834DB8BB61B0792EA439424CECADC29489FD90B773075B619
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_e65815eb650476eff43821b53ef1dba3b7080109c248cfc3e192859dc29a6f2f.bin

File Explorer

jaffacakes118_e65815eb650476eff43821b53ef1dba3b7080109c248cfc3e192859dc29a6f2f.bin

.dll 56KB

jaffacakes118_e65815eb650476eff43821b53ef1dba3b7080109c248cfc3e192859dc29a6f2f.bin

IMPHASH eaa7a4d1293f15d9dfa3cf0124ab3367
SHA256 e65815eb650476eff43821b53ef1dba3b7080109c248cfc3e192859dc29a6f2f
MD5 07a34d7447751d210b3499de94670bde
SHA1 0a8adc54b0af51b465a7c0924e3a533ad6016071
SHA512 ef8d86d53c21ff406f753e30872197a07e729dd2bf01fb047d520eedb4ec4c661ba9b86da09b3b92f7a720994cc83838d85a1785756d340afd1932d6ab92ba5c
SSDEEP 768:mHwML5dJmX6ZnWPAIWQVVjXORklO1jfVUpcMw4FxD:6wCBZsAIvV7YjfKpM4FxD
TLSH
T13843E744FE47D8FACC961834DB8BB61B0792EA439424CECADC29489FD90B773075B619
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

sdl2

SDL_AddTimer SDL_Delay SDL_GetTicks SDL_InitSubSystem SDL_PushEvent SDL_QuitSubSystem SDL_RemoveTimer

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcr90

__dllonexit _amsg_exit _assert _exit _initterm _iob _lock _onexit _snwprintf _unlock abort calloc free fwprintf fwrite malloc memcpy memmove raise strlen strncmp vfprintf wcscpy

user32

MessageBoxW

python27

PyCFunction_Call PyCFunction_NewEx PyCFunction_Type PyClass_Type PyCode_New PyDict_GetItem PyDict_New PyDict_Next PyDict_SetItem PyDict_Size PyErr_Clear PyErr_ExceptionMatches PyErr_Format PyErr_NormalizeException PyErr_Occurred PyErr_SetString PyErr_WarnEx PyEval_RestoreThread PyEval_SaveThread PyExc_AttributeError PyExc_BaseException PyExc_ImportError PyExc_KeyError PyExc_NameError PyExc_OverflowError PyExc_SystemError PyExc_TypeError PyFloat_FromDouble PyFloat_Type PyFrame_New PyImport_AddModule PyInt_FromLong PyInt_FromSsize_t PyInt_Type PyList_Append PyList_New PyList_Type PyLong_AsDouble PyLong_AsLong PyLong_AsUnsignedLong PyLong_FromUnsignedLong PyLong_Type PyMem_Free PyMem_Malloc PyMem_Realloc PyMethod_New PyMethod_Type PyModule_GetDict PyNumber_Divide PyNumber_Int PyNumber_Long PyNumber_Multiply PyNumber_Subtract PyOS_snprintf PyObject_Call PyObject_CallFunctionObjArgs PyObject_CallMethodObjArgs PyObject_ClearWeakRefs PyObject_GC_Del PyObject_GC_Track PyObject_GC_UnTrack PyObject_GetAttr PyObject_GetAttrString PyObject_GetItem PyObject_IsTrue PyObject_RichCompare PyObject_SetAttr PyObject_SetAttrString PyObject_SetItem PyObject_Size PyString_AsString PyString_FromFormat PyString_FromString PyString_FromStringAndSize PyString_InternFromString PyString_Type PyTraceBack_Here PyTraceBack_Type PyTuple_New PyTuple_Pack PyType_IsSubtype PyType_Ready PyUnicodeUCS2_Compare PyUnicodeUCS2_DecodeUTF8 PyUnicode_Type Py_GetVersion Py_InitModule4 _PyObject_GC_New _PyString_Eq _PyThreadState_Current _Py_CheckRecursionLimit _Py_CheckRecursiveCall _Py_NoneStruct _Py_TrueStruct _Py_ZeroStruct

Name

.text

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

82B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

676B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_e65815eb650476eff43821b53ef1dba3b7080109c248cfc3e192859dc29a6f2f.bin

sdl2

kernel32

msvcr90

user32

python27

generic