jaffacakes118_31e61d4a2ff7a5001a66fe609dbda998024a87dbf23b98f62cb613308fa5491a[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_31e61d4a2ff7a5001a66fe609dbda998024a87dbf23b98f62cb613308fa5491a.bin
Size 25KB
Sample260924-dzesvada39
SHA256 31e61d4a2ff7a5001a66fe609dbda998024a87dbf23b98f62cb613308fa5491a
MD5 867784a847c872882f4de326f8009321
SHA1 1bd8ddc59fcebce13ec667038d54e85f35a929f0
SHA512 d1fa1ddc807c13e35ce2190d0fac88a9bf669391ede6ee901367457b734aecd2f611a6a8afe7f66846e1f5ba1a69edbc4f774f0519ce56655babf31894d34b2e
SSDEEP 384:bClHW7aqkyIQist5pYHa7psWThhZaqd6d4EhaVvRfELlfmfpac7UB:8WmqyQTtrwieOZaqg/aVvIu8coB
TLSH
T18CB24A5AEEA1C8F2E0401B7C9E49BA3F177B7721251D04B279AD1C8ED949384270C3BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_31e61d4a2ff7a5001a66fe609dbda998024a87dbf23b98f62cb613308fa5491a.bin

File Explorer

jaffacakes118_31e61d4a2ff7a5001a66fe609dbda998024a87dbf23b98f62cb613308fa5491a.bin

.exe 25KB

jaffacakes118_31e61d4a2ff7a5001a66fe609dbda998024a87dbf23b98f62cb613308fa5491a.bin

SHA256 31e61d4a2ff7a5001a66fe609dbda998024a87dbf23b98f62cb613308fa5491a
MD5 867784a847c872882f4de326f8009321
SHA1 1bd8ddc59fcebce13ec667038d54e85f35a929f0
SHA512 d1fa1ddc807c13e35ce2190d0fac88a9bf669391ede6ee901367457b734aecd2f611a6a8afe7f66846e1f5ba1a69edbc4f774f0519ce56655babf31894d34b2e
SSDEEP 384:bClHW7aqkyIQist5pYHa7psWThhZaqd6d4EhaVvRfELlfmfpac7UB:8WmqyQTtrwieOZaqg/aVvIu8coB
TLSH
T18CB24A5AEEA1C8F2E0401B7C9E49BA3F177B7721251D04B279AD1C8ED949384270C3BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_31e61d4a2ff7a5001a66fe609dbda998024a87dbf23b98f62cb613308fa5491a.bin

generic