jaffacakes118_c54d21d023a69769c29b8058842fc22d008fe59f621bae3f8e598999847728a2[.]bin

General

Target
jaffacakes118_c54d21d023a69769c29b8058842fc22d008fe59f621bae3f8e598999847728a2.bin
Size 3.6MB
Sample260922-qagblafa27
SHA256 c54d21d023a69769c29b8058842fc22d008fe59f621bae3f8e598999847728a2
MD5 a621312fa50da365b9280e607115d6ac
SHA1 7ad36ea6d89fd43a3a0dc5178f90c5708886f86a
SHA512 6f9d9d679be072e01821b6d72111d0121ff829fa7f131347b8231af0020fd6f22ce2e94803ebd0d2cdf6dab1b6c220a36abf0ed4e117b5a170523ab510856215
SSDEEP 49152:NBPXtRI7Kd8Pdv5EyDa9wyIyCAOsdsdazEXV:NBPOFPaIl
TLSH
T13F06D7E630C6A6DDC816C73F8B13FE7F898F713A4527E4E3A168E2129D19C443656E09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_c54d21d023a69769c29b8058842fc22d008fe59f621bae3f8e598999847728a2.bin

File Explorer

jaffacakes118_c54d21d023a69769c29b8058842fc22d008fe59f621bae3f8e598999847728a2.bin

.dll 3.6MB

jaffacakes118_c54d21d023a69769c29b8058842fc22d008fe59f621bae3f8e598999847728a2.bin

SHA256 c54d21d023a69769c29b8058842fc22d008fe59f621bae3f8e598999847728a2
MD5 a621312fa50da365b9280e607115d6ac
SHA1 7ad36ea6d89fd43a3a0dc5178f90c5708886f86a
SHA512 6f9d9d679be072e01821b6d72111d0121ff829fa7f131347b8231af0020fd6f22ce2e94803ebd0d2cdf6dab1b6c220a36abf0ed4e117b5a170523ab510856215
SSDEEP 49152:NBPXtRI7Kd8Pdv5EyDa9wyIyCAOsdsdazEXV:NBPOFPaIl
TLSH
T13F06D7E630C6A6DDC816C73F8B13FE7F898F713A4527E4E3A168E2129D19C443656E09
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

346096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

383KB

Virtual Size

383KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.vlizer

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_c54d21d023a69769c29b8058842fc22d008fe59f621bae3f8e598999847728a2.bin

generic