jaffacakes118_3ecd7088c1ae8d6f0bcdd2109929665c905503006117b66300eb0e79586838a8[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_3ecd7088c1ae8d6f0bcdd2109929665c905503006117b66300eb0e79586838a8.bin
Size 156KB
Sample260924-e7ptfsea95
SHA256 3ecd7088c1ae8d6f0bcdd2109929665c905503006117b66300eb0e79586838a8
MD5 14ecd2aed23588cfcbf1ce0a55c08ede
SHA1 f04d7cdc1d6fb87d3d8fa273c3de266575656507
SHA512 6625502da4183afa7bf1a5617f3e7eedb4e051a47b9001f5260553059af567a5810d1b07c39c4808f8353f34e7c38c25bb02d5440a237591006b00a7020b7aae
SSDEEP 3072:NKpVICJMoUePm0BL+b240lzx4DidcztZzOBibGno7BA5oEQkSxqQF6wMvlqy4rt6:NGVzMoU+dq2PzcidadUJ2XWl0
TLSH
T19AF38DBEF5D0C5B2D0561ABC8D59D2D4653979302E24289FB5E16F4D48BA2E21B3C3C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_3ecd7088c1ae8d6f0bcdd2109929665c905503006117b66300eb0e79586838a8.bin

File Explorer

jaffacakes118_3ecd7088c1ae8d6f0bcdd2109929665c905503006117b66300eb0e79586838a8.bin

.dll 156KB

jaffacakes118_3ecd7088c1ae8d6f0bcdd2109929665c905503006117b66300eb0e79586838a8.bin

SHA256 3ecd7088c1ae8d6f0bcdd2109929665c905503006117b66300eb0e79586838a8
MD5 14ecd2aed23588cfcbf1ce0a55c08ede
SHA1 f04d7cdc1d6fb87d3d8fa273c3de266575656507
SHA512 6625502da4183afa7bf1a5617f3e7eedb4e051a47b9001f5260553059af567a5810d1b07c39c4808f8353f34e7c38c25bb02d5440a237591006b00a7020b7aae
SSDEEP 3072:NKpVICJMoUePm0BL+b240lzx4DidcztZzOBibGno7BA5oEQkSxqQF6wMvlqy4rt6:NGVzMoU+dq2PzcidadUJ2XWl0
TLSH
T19AF38DBEF5D0C5B2D0561ABC8D59D2D4653979302E24289FB5E16F4D48BA2E21B3C3C3
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

132954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

126KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp0

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_3ecd7088c1ae8d6f0bcdd2109929665c905503006117b66300eb0e79586838a8.bin

generic