jaffacakes118_e797a0d44b65f1a9edebcee80b82c25c2688ac581b91af3600a2011764192390[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_e797a0d44b65f1a9edebcee80b82c25c2688ac581b91af3600a2011764192390.bin
Size 1.9MB
Sample260924-b61msabe43
SHA256 e797a0d44b65f1a9edebcee80b82c25c2688ac581b91af3600a2011764192390
MD5 65f5b28cec4ed761f786c8f90d1dbeb9
SHA1 f18e5e71afb614ad317d3b47078f2dde4ab3c0ff
SHA512 e3dc31b0c5260b40af685603cb87628bc59d54acdfd7b08dd6ea10e6fa218882c949994014180db09d9e67c8edd0622f4b4fe929d38e2196cba5f987b6b1931a
SSDEEP 24576:NT922BXsCcxqzL9f4nE0PIdlNmeWuWXNiOOVfHcoUXgGWHDj+H8b:Ns2B8qBqeWbXNi0jgGWHDjLb
TLSH
T16295D4226D0B742ACE31463D99336FC8A1F16F1C6823E8EF21A439596A7F7C1D836705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_e797a0d44b65f1a9edebcee80b82c25c2688ac581b91af3600a2011764192390.bin

File Explorer

jaffacakes118_e797a0d44b65f1a9edebcee80b82c25c2688ac581b91af3600a2011764192390.bin

.exe 1.9MB

jaffacakes118_e797a0d44b65f1a9edebcee80b82c25c2688ac581b91af3600a2011764192390.bin

SHA256 e797a0d44b65f1a9edebcee80b82c25c2688ac581b91af3600a2011764192390
MD5 65f5b28cec4ed761f786c8f90d1dbeb9
SHA1 f18e5e71afb614ad317d3b47078f2dde4ab3c0ff
SHA512 e3dc31b0c5260b40af685603cb87628bc59d54acdfd7b08dd6ea10e6fa218882c949994014180db09d9e67c8edd0622f4b4fe929d38e2196cba5f987b6b1931a
SSDEEP 24576:NT922BXsCcxqzL9f4nE0PIdlNmeWuWXNiOOVfHcoUXgGWHDj+H8b:Ns2B8qBqeWbXNi0jgGWHDjLb
TLSH
T16295D4226D0B742ACE31463D99336FC8A1F16F1C6823E8EF21A439596A7F7C1D836705
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

701052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

681KB

Virtual Size

680KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_e797a0d44b65f1a9edebcee80b82c25c2688ac581b91af3600a2011764192390.bin

generic