jaffacakes118_dfa85de3f56f73f1bb7cb9acb0efa1fa69ff4579151e7f1e2cd8a67f990b7622[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_dfa85de3f56f73f1bb7cb9acb0efa1fa69ff4579151e7f1e2cd8a67f990b7622.bin
Size 344KB
Sample260924-jbc71a1ake
SHA256 dfa85de3f56f73f1bb7cb9acb0efa1fa69ff4579151e7f1e2cd8a67f990b7622
MD5 ed372d019474407c241a6ad78d8c9f8f
SHA1 6f9bb9b309318278b204233ed0a723dd432f4400
SHA512 a6554acfa6270a9661a6f57bbda67a80d1fc87d15da63be7b8d7a096763973ab9faf2d38bdb4c06c6b8447ceec819d83af0dbc54886958c8360dff0f2cb6a15b
SSDEEP 3072:S293Z+G430HrYaH7xzlzKsjrz3hSInGd9wvVe42kx/JLPLIzmM8/yFT9Ksjg:S29p+GC0HcabrOIQ9wvVe4hMzmR6x9
TLSH
T1C9745B023F9184B1D27E4A30E95A5B7DD7F7AC700EF21947AB503F6C6E329C28925E25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_dfa85de3f56f73f1bb7cb9acb0efa1fa69ff4579151e7f1e2cd8a67f990b7622.bin

File Explorer

jaffacakes118_dfa85de3f56f73f1bb7cb9acb0efa1fa69ff4579151e7f1e2cd8a67f990b7622.bin

.exe 344KB

jaffacakes118_dfa85de3f56f73f1bb7cb9acb0efa1fa69ff4579151e7f1e2cd8a67f990b7622.bin

SHA256 dfa85de3f56f73f1bb7cb9acb0efa1fa69ff4579151e7f1e2cd8a67f990b7622
MD5 ed372d019474407c241a6ad78d8c9f8f
SHA1 6f9bb9b309318278b204233ed0a723dd432f4400
SHA512 a6554acfa6270a9661a6f57bbda67a80d1fc87d15da63be7b8d7a096763973ab9faf2d38bdb4c06c6b8447ceec819d83af0dbc54886958c8360dff0f2cb6a15b
SSDEEP 3072:S293Z+G430HrYaH7xzlzKsjrz3hSInGd9wvVe42kx/JLPLIzmM8/yFT9Ksjg:S29p+GC0HcabrOIQ9wvVe4hMzmR6x9
TLSH
T1C9745B023F9184B1D27E4A30E95A5B7DD7F7AC700EF21947AB503F6C6E329C28925E25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.RegDelV

Size

4KB

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.FolderE

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.NewRand

Size

4KB

Virtual Size

737B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ReadPat

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Release

Size

4KB

Virtual Size

363B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

308KB

Virtual Size

305KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

968B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_dfa85de3f56f73f1bb7cb9acb0efa1fa69ff4579151e7f1e2cd8a67f990b7622.bin

generic