jaffacakes118_dcdf17eecb4b08fc459c5a54e5c68696f508447d2a18bb792e69da17026b81f8[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_dcdf17eecb4b08fc459c5a54e5c68696f508447d2a18bb792e69da17026b81f8.bin
Size 2.7MB
Sample260924-2kscdshc53
SHA256 dcdf17eecb4b08fc459c5a54e5c68696f508447d2a18bb792e69da17026b81f8
MD5 06f8218aac261f216b5c997cb7613fde
SHA1 4097e471826a0b802fbb20509e9cdb85b2bd67e8
SHA512 26e80f5ff225c2d986dab18c57bd43367d1a1d476ff3ab33286b10a5fd3f04a6f528a3f4e606fa3101681ca92e0e11210844a4d7daf785b1594e56667ba91ea2
SSDEEP 49152:gHaWvnSP1EkFQU1ZsD5n78kz2ZEtWEedk+xjmc:gHaW2sd7LPtWEedk+Jmc
TLSH
T10AD54C13B285683FE17B1B368C778655993B7A203B269C5B6FF40D0C0F38A426D3DA56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_dcdf17eecb4b08fc459c5a54e5c68696f508447d2a18bb792e69da17026b81f8.bin

File Explorer

jaffacakes118_dcdf17eecb4b08fc459c5a54e5c68696f508447d2a18bb792e69da17026b81f8.bin

.exe 2.7MB

jaffacakes118_dcdf17eecb4b08fc459c5a54e5c68696f508447d2a18bb792e69da17026b81f8.bin

SHA256 dcdf17eecb4b08fc459c5a54e5c68696f508447d2a18bb792e69da17026b81f8
MD5 06f8218aac261f216b5c997cb7613fde
SHA1 4097e471826a0b802fbb20509e9cdb85b2bd67e8
SHA512 26e80f5ff225c2d986dab18c57bd43367d1a1d476ff3ab33286b10a5fd3f04a6f528a3f4e606fa3101681ca92e0e11210844a4d7daf785b1594e56667ba91ea2
SSDEEP 49152:gHaWvnSP1EkFQU1ZsD5n78kz2ZEtWEedk+xjmc:gHaW2sd7LPtWEedk+Jmc
TLSH
T10AD54C13B285683FE17B1B368C778655993B7A203B269C5B6FF40D0C0F38A426D3DA56
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2476460

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

840B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

220KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_dcdf17eecb4b08fc459c5a54e5c68696f508447d2a18bb792e69da17026b81f8.bin

generic