jaffacakes118_a21cf0577ec6e2dac2d2dd4548291decb18f589aec1299f9d562537224313f17[.]bin

General

Target
jaffacakes118_a21cf0577ec6e2dac2d2dd4548291decb18f589aec1299f9d562537224313f17.bin
Size 184KB
Sample260924-jca42a1wfz
SHA256 a21cf0577ec6e2dac2d2dd4548291decb18f589aec1299f9d562537224313f17
MD5 11a06cd3896b399c0bdd74bb484512d1
SHA1 61f9ce08811b7ffa93b466eefb173f9ce8a0daf3
SHA512 26e3e91b3cfea12323ad3de072d3fd006294a2858354030b0f732792c8277aeda6add759460b93fcf5b263fece75b8dbf02a42e09cad6ccd62493933a3b63a40
SSDEEP 3072:KQO+1p+mRFrQGyd/vvvYAnd4sA7I54fXlZB:KlU+mDl8/PYKUcWP
TLSH
T1AE045B117EA184B1C37D4434999A67BAD2E69D705EF20803DF523FAC6E31C87C62AF16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_a21cf0577ec6e2dac2d2dd4548291decb18f589aec1299f9d562537224313f17.bin

File Explorer

jaffacakes118_a21cf0577ec6e2dac2d2dd4548291decb18f589aec1299f9d562537224313f17.bin

.exe 184KB

jaffacakes118_a21cf0577ec6e2dac2d2dd4548291decb18f589aec1299f9d562537224313f17.bin

SHA256 a21cf0577ec6e2dac2d2dd4548291decb18f589aec1299f9d562537224313f17
MD5 11a06cd3896b399c0bdd74bb484512d1
SHA1 61f9ce08811b7ffa93b466eefb173f9ce8a0daf3
SHA512 26e3e91b3cfea12323ad3de072d3fd006294a2858354030b0f732792c8277aeda6add759460b93fcf5b263fece75b8dbf02a42e09cad6ccd62493933a3b63a40
SSDEEP 3072:KQO+1p+mRFrQGyd/vvvYAnd4sA7I54fXlZB:KlU+mDl8/PYKUcWP
TLSH
T1AE045B117EA184B1C37D4434999A67BAD2E69D705EF20803DF523FAC6E31C87C62AF16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5100

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.RegDelV

Size

4KB

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.GetAtlD

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.IsRuiXi

Size

4KB

Virtual Size

1022B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

156KB

Virtual Size

153KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

968B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_a21cf0577ec6e2dac2d2dd4548291decb18f589aec1299f9d562537224313f17.bin

generic