jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0.bin
Size 98KB
Sample260922-kbshcssapc
SHA256 4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0
MD5 965adbd72caaf7f4084e46fb3701a984
SHA1 6dadc55c096a9525af3ea48592c27e72fa7b7dec
SHA512 de11f52ebcc1c17e2006b8c7593179302de62d8c796a09503c70617104e5ec944e02695624b8c5edc42ddcb66330405eb819f5c8bf61cbae9694f62a69c7150f
SSDEEP 1536:vA4gVn1NT1SdYAYmWhx8EzTZqO000ykNnptCT:vA48NTWL+hx3oO000ykN
TLSH
T120A38217B1438DB9CBC2113548A7EFBA0822BDFE07174A76AB58597DFC852F316059E0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0.bin

File Explorer

jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0.bin

.dll 98KB

jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0.bin

IMPHASH d52125e50730b1e208b0eb1d2a94d9d3
SHA256 4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0
MD5 965adbd72caaf7f4084e46fb3701a984
SHA1 6dadc55c096a9525af3ea48592c27e72fa7b7dec
SHA512 de11f52ebcc1c17e2006b8c7593179302de62d8c796a09503c70617104e5ec944e02695624b8c5edc42ddcb66330405eb819f5c8bf61cbae9694f62a69c7150f
SSDEEP 1536:vA4gVn1NT1SdYAYmWhx8EzTZqO000ykNnptCT:vA48NTWL+hx3oO000ykN
TLSH
T120A38217B1438DB9CBC2113548A7EFBA0822BDFE07174A76AB58597DFC852F316059E0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcr90

__dllonexit _amsg_exit _decode_pointer _encode_pointer _initterm _iob _lock _onexit _unlock abort bsearch calloc fprintf fputc free fwrite malloc memcpy sprintf strlen strncmp vfprintf

python27

PyCFunction_NewEx PyCode_New PyDict_GetItem PyDict_New PyDict_Next PyDict_SetItem PyDict_Size PyErr_Format PyErr_Occurred PyErr_SetString PyErr_WarnEx PyExc_ImportError PyExc_SystemError PyExc_TypeError PyFrame_New PyImport_AddModule PyInt_FromLong PyLong_AsLong PyMem_Malloc PyMem_Realloc PyModule_GetDict PyNumber_Int PyNumber_Long PyOS_snprintf PyObject_Call PyObject_GetAttr PyObject_SetAttrString PyString_AsString PyString_FromFormat PyString_FromString PyString_FromStringAndSize PyString_InternFromString PyString_Size PyString_Type PyTraceBack_Here PyTuple_New PyTuple_Pack PyUnicodeUCS2_Compare PyUnicodeUCS2_DecodeUTF8 Py_GetVersion Py_InitModule4 _PyString_Eq _PyThreadState_Current _Py_CheckRecursionLimit _Py_CheckRecursiveCall

Name

.text

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

584B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

676B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0.bin

kernel32

msvcr90

python27

generic