jaffacakes118_28bda59b388f7bea06f3a4bdaf71b8d53fd9e909170d224798a44f20ab3c7b17[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_28bda59b388f7bea06f3a4bdaf71b8d53fd9e909170d224798a44f20ab3c7b17.bin
Size 61KB
Sample260922-j9rhaatz2j
SHA256 28bda59b388f7bea06f3a4bdaf71b8d53fd9e909170d224798a44f20ab3c7b17
MD5 84678a6bc67682f6a3dfa9070604304a
SHA1 d561135b5722b3778d5ada74e43d07be3d07ff6a
SHA512 d7397b3d66edebda35b449f861711c24a8d663968d2ebfc014856122c3c080cd81ad907b844be3f34ea8e1db8ae6fcc4f451293887be8981705dc68c5b2ee54f
SSDEEP 1536:ZUQMEd89c/zs78gFOK9rLzc23Qu6pOpheb:ZUQMEd84zs79O8z/H6pbb
TLSH
T1A153E604FD83E9F1DC852936A583F63B0B23E1509424CEDEDA5D448BE9436B65F4BB02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_28bda59b388f7bea06f3a4bdaf71b8d53fd9e909170d224798a44f20ab3c7b17.bin

File Explorer

jaffacakes118_28bda59b388f7bea06f3a4bdaf71b8d53fd9e909170d224798a44f20ab3c7b17.bin

.dll 61KB

jaffacakes118_28bda59b388f7bea06f3a4bdaf71b8d53fd9e909170d224798a44f20ab3c7b17.bin

IMPHASH e46707e4b9d14cb3977296a033d1a233
SHA256 28bda59b388f7bea06f3a4bdaf71b8d53fd9e909170d224798a44f20ab3c7b17
MD5 84678a6bc67682f6a3dfa9070604304a
SHA1 d561135b5722b3778d5ada74e43d07be3d07ff6a
SHA512 d7397b3d66edebda35b449f861711c24a8d663968d2ebfc014856122c3c080cd81ad907b844be3f34ea8e1db8ae6fcc4f451293887be8981705dc68c5b2ee54f
SSDEEP 1536:ZUQMEd89c/zs78gFOK9rLzc23Qu6pOpheb:ZUQMEd84zs79O8z/H6pbb
TLSH
T1A153E604FD83E9F1DC852936A583F63B0B23E1509424CEDEDA5D448BE9436B65F4BB02
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

sdl2

SDL_CreateRGBSurface SDL_FreeSurface SDL_GetColorKey SDL_LockSurface SDL_SetError SDL_SetSurfaceBlendMode SDL_UnlockSurface SDL_UpperBlit SDL_UpperBlitScaled

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcr90

__dllonexit __setusermatherr _amsg_exit _errno _initterm _iob _lock _onexit _unlock abort calloc ceil cos floor fprintf free fwrite malloc memcpy memset sin strlen strncmp vfprintf

python27

PyCFunction_NewEx PyCFunction_Type PyCapsule_GetPointer PyCode_New PyDict_GetItem PyDict_New PyDict_Next PyDict_SetItem PyDict_Size PyErr_ExceptionMatches PyErr_Format PyErr_GivenExceptionMatches PyErr_NormalizeException PyErr_Occurred PyErr_SetString PyErr_WarnEx PyEval_RestoreThread PyEval_SaveThread PyExc_AttributeError PyExc_BaseException PyExc_ImportError PyExc_NameError PyExc_RuntimeError PyExc_StopIteration PyExc_SystemError PyExc_TypeError PyExc_ValueError PyFloat_AsDouble PyFloat_FromDouble PyFloat_Type PyFrame_New PyImport_AddModule PyImport_Import PyInt_FromLong PyInt_FromSsize_t PyList_New PyList_Type PyLong_AsLong PyMem_Malloc PyMem_Realloc PyMethod_Type PyModule_GetDict PyNumber_Divide PyNumber_Int PyNumber_Long PyNumber_Multiply PyOS_snprintf PyObject_Call PyObject_CallFunctionObjArgs PyObject_GetAttr PyObject_GetItem PyObject_GetIter PyObject_IsTrue PyObject_RichCompare PyObject_SetAttrString PyString_AsString PyString_FromFormat PyString_FromString PyString_FromStringAndSize PyString_InternFromString PyString_Type PyTraceBack_Here PyTraceBack_Type PyTuple_New PyTuple_Pack PyTuple_Type PyType_IsSubtype PyUnicodeUCS2_Compare PyUnicodeUCS2_DecodeUTF8 Py_GetVersion Py_InitModule4 _PyString_Eq _PyThreadState_Current _Py_CheckRecursionLimit _Py_CheckRecursiveCall _Py_NoneStruct _Py_TrueStruct _Py_ZeroStruct

Name

.text

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

78B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

676B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_28bda59b388f7bea06f3a4bdaf71b8d53fd9e909170d224798a44f20ab3c7b17.bin

sdl2

kernel32

msvcr90

python27

generic