jaffacakes118_5de1d97e4b3908678e6273cedbba7b28b7285133a8afee3a968500136fe6574f[.]bin

General

Target
jaffacakes118_5de1d97e4b3908678e6273cedbba7b28b7285133a8afee3a968500136fe6574f.bin
Size 201KB
Sample260924-b5n8csbd99
SHA256 5de1d97e4b3908678e6273cedbba7b28b7285133a8afee3a968500136fe6574f
MD5 883f814fb5cea755f15589efe335f647
SHA1 560f88bff0deac1487e111472ae9cd45cbed1d7f
SHA512 4806ed6a5f66d8e87dfde79f9ee2e5f63bd3e222f5255891cdeb96ef0974b4b963b99a282fa6c8e0a8567688d402799d5025d300e65da38a24325155e4b65b2c
SSDEEP 3072:kJZQQJf4lj9i0q6Bav7jsN8rHMKV4uJ2QOfJCh5besKC0CoHrST77cuG3LH:iZq5i0p87jDT2Q4Jo56Cc0
TLSH
T169146D3AF1C04937D0761E7CCD9AA2E5751ABF602D3C154F79E81D4C8A3A6D26A293C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_5de1d97e4b3908678e6273cedbba7b28b7285133a8afee3a968500136fe6574f.bin

File Explorer

jaffacakes118_5de1d97e4b3908678e6273cedbba7b28b7285133a8afee3a968500136fe6574f.bin

.dll 201KB

jaffacakes118_5de1d97e4b3908678e6273cedbba7b28b7285133a8afee3a968500136fe6574f.bin

SHA256 5de1d97e4b3908678e6273cedbba7b28b7285133a8afee3a968500136fe6574f
MD5 883f814fb5cea755f15589efe335f647
SHA1 560f88bff0deac1487e111472ae9cd45cbed1d7f
SHA512 4806ed6a5f66d8e87dfde79f9ee2e5f63bd3e222f5255891cdeb96ef0974b4b963b99a282fa6c8e0a8567688d402799d5025d300e65da38a24325155e4b65b2c
SSDEEP 3072:kJZQQJf4lj9i0q6Bav7jsN8rHMKV4uJ2QOfJCh5besKC0CoHrST77cuG3LH:iZq5i0p87jDT2Q4Jo56Cc0
TLSH
T169146D3AF1C04937D0761E7CCD9AA2E5751ABF602D3C154F79E81D4C8A3A6D26A293C3
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

178416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

170KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_5de1d97e4b3908678e6273cedbba7b28b7285133a8afee3a968500136fe6574f.bin

generic