jaffacakes118_b3e78572423c2ba37b016601b4da0207214dab4f1255ce1da79a62a33708c43e[.]bin

General

Target
jaffacakes118_b3e78572423c2ba37b016601b4da0207214dab4f1255ce1da79a62a33708c43e.bin
Size 853KB
Sample260924-dn5vwsyscx
SHA256 b3e78572423c2ba37b016601b4da0207214dab4f1255ce1da79a62a33708c43e
MD5 cec6e66ab509ea762beacbf4a67db57e
SHA1 346a680d8b6a60acc64eae81018d13bf98dfe923
SHA512 fe2756da122ff8ea7ec77cc4dc5403f874eca01b155a9dc53f645bf92d361ae66011f3f1aac44954d790701b328babb1a4bb04e605864ce417e39ec6501786ea
SSDEEP 12288:gfvquQAqI8DRly83MyWAtemtKpQMhdgUEgwjTNtXDAuCUqeXooAvYPYaHFqrTHKr:g16W8QAdKJbgUEgwjTN6UJMLTHK
TLSH
T1D805B45263123863ECD3D5B8A428C369E444F5141FC49C46DBC36D0AFAFFA87E42679A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_b3e78572423c2ba37b016601b4da0207214dab4f1255ce1da79a62a33708c43e.bin

File Explorer

jaffacakes118_b3e78572423c2ba37b016601b4da0207214dab4f1255ce1da79a62a33708c43e.bin

.dll 853KB

jaffacakes118_b3e78572423c2ba37b016601b4da0207214dab4f1255ce1da79a62a33708c43e.bin

SHA256 b3e78572423c2ba37b016601b4da0207214dab4f1255ce1da79a62a33708c43e
MD5 cec6e66ab509ea762beacbf4a67db57e
SHA1 346a680d8b6a60acc64eae81018d13bf98dfe923
SHA512 fe2756da122ff8ea7ec77cc4dc5403f874eca01b155a9dc53f645bf92d361ae66011f3f1aac44954d790701b328babb1a4bb04e605864ce417e39ec6501786ea
SSDEEP 12288:gfvquQAqI8DRly83MyWAtemtKpQMhdgUEgwjTNtXDAuCUqeXooAvYPYaHFqrTHKr:g16W8QAdKJbgUEgwjTN6UJMLTHK
TLSH
T1D805B45263123863ECD3D5B8A428C369E444F5141FC49C46DBC36D0AFAFFA87E42679A
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

797328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

779KB

Virtual Size

778KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

163B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_b3e78572423c2ba37b016601b4da0207214dab4f1255ce1da79a62a33708c43e.bin

generic