jaffacakes118_bcc2cbe7045dc1af6b08567a0a4abe4e3c21894455eab458aab8693a62869b1c[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_bcc2cbe7045dc1af6b08567a0a4abe4e3c21894455eab458aab8693a62869b1c.bin
Size 270KB
Sample260923-hypzmsyhqa
SHA256 bcc2cbe7045dc1af6b08567a0a4abe4e3c21894455eab458aab8693a62869b1c
MD5 ce67f56c05de30b03a387315040f0d99
SHA1 c1920c4d6b201e5b52b21dda363638aec1a05c1d
SHA512 6759d26ad0ebed9a003a6d9c5aca8d63c5c0fe992a1e7adee35abd1dd06be460a36cafe47791aef7ed4d4deb6ce82fe6e976552730ebf305fa6b21f677d86b11
SSDEEP 1536:1oN84Kuj+YskSPXcXKU9dVbFLi6hOzIf0mnVtLK9L+cN+RLjl11ZmEu4K/vaC/uJ:1Z4hbgAdVxX3TLK9qPll7AE83acuZt
TLSH
T1C4446D0392A07C60E7294F369E1EC5F8261FF9514F68ABBB521ABB1F04B1DB2C172754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_bcc2cbe7045dc1af6b08567a0a4abe4e3c21894455eab458aab8693a62869b1c.bin

File Explorer

jaffacakes118_bcc2cbe7045dc1af6b08567a0a4abe4e3c21894455eab458aab8693a62869b1c.bin

.exe 270KB

jaffacakes118_bcc2cbe7045dc1af6b08567a0a4abe4e3c21894455eab458aab8693a62869b1c.bin

IMPHASH d8c39d5ff6edc55fa56f3300f617117e
SHA256 bcc2cbe7045dc1af6b08567a0a4abe4e3c21894455eab458aab8693a62869b1c
MD5 ce67f56c05de30b03a387315040f0d99
SHA1 c1920c4d6b201e5b52b21dda363638aec1a05c1d
SHA512 6759d26ad0ebed9a003a6d9c5aca8d63c5c0fe992a1e7adee35abd1dd06be460a36cafe47791aef7ed4d4deb6ce82fe6e976552730ebf305fa6b21f677d86b11
SSDEEP 1536:1oN84Kuj+YskSPXcXKU9dVbFLi6hOzIf0mnVtLK9L+cN+RLjl11ZmEu4K/vaC/uJ:1Z4hbgAdVxX3TLK9qPll7AE83acuZt
TLSH
T1C4446D0392A07C60E7294F369E1EC5F8261FF9514F68ABBB521ABB1F04B1DB2C172754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthW GetNumaProcessorNode MoveFileExA SystemTimeToTzSpecificLocalTime InterlockedDecrement SetDefaultCommConfigW GetEnvironmentStringsW SetConsoleScreenBufferSize SetVolumeMountPointW BackupSeek GetModuleHandleW GetNumberFormatA SetFileTime GetConsoleAliasExesW GetCommandLineA GetDriveTypeA GetEnvironmentStrings GetPrivateProfileIntA LoadLibraryW TerminateThread FatalAppExitW ReadConsoleInputA CopyFileW SetConsoleCP GetVolumePathNameA GetStartupInfoW CreateJobObjectA FindFirstFileW GetCurrentDirectoryW SetLastError EnumSystemCodePagesW LoadLibraryA OpenMutexA GetProcessId LocalAlloc GetFileType IsSystemResumeAutomatic RemoveDirectoryW GetProfileStringA FindNextChangeNotification FindAtomA GetModuleHandleA FreeEnvironmentStringsW FindNextFileW VirtualProtect GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW OpenSemaphoreW FindAtomW GetWindowsDirectoryW FindFirstVolumeW AddConsoleAliasA CreateFileW EnumResourceNamesW GetComputerNameA GetLastError GetCommandLineW CloseHandle FlushFileBuffers MoveFileA HeapFree HeapAlloc GetProcAddress ExitProcess DecodePointer EncodePointer HeapSetInformation UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate WriteFile GetStdHandle GetModuleFileNameW InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId Sleep HeapSize SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind HeapReAlloc SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW IsProcessorFeaturePresent

user32

CharUpperW GetListBoxInfo

gdi32

SelectPalette GetTextFaceW GetCharWidthW

shell32

DragFinish

winhttp

WinHttpWriteData