jaffacakes118_07ff1f83289f3ad2d7a19d734cb9137517ee7e2cd52160a0f7d599e2ca590e88[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_07ff1f83289f3ad2d7a19d734cb9137517ee7e2cd52160a0f7d599e2ca590e88.bin
Size 52KB
Sample260924-jsj2waws5n
SHA256 07ff1f83289f3ad2d7a19d734cb9137517ee7e2cd52160a0f7d599e2ca590e88
MD5 32254a9009a89147f5cfbd03ba2cee84
SHA1 578439fa4e02a795e44945bb2cb1edd1cb9245ab
SHA512 182c62bd60ac437c4bf8781f74eb49e29312382f066d6acda72db90c91a0c996716c018522db5d3c516463286e8e3dee1f8c8c2d6b621ecf6f55152dd8ee0904
SSDEEP 1536:lwQOArLirM/JWcSUScDXyjpdNyOUT9m/WTBeYd:lXrLGoUT1hFKO2m/0B
TLSH
T1AD33F15647C2C963CA5089B01B0B20F3A6F250975B4C57DFA1E1335DEEFE798A80E48E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_07ff1f83289f3ad2d7a19d734cb9137517ee7e2cd52160a0f7d599e2ca590e88.bin
unpack001/out.upx

File Explorer

jaffacakes118_07ff1f83289f3ad2d7a19d734cb9137517ee7e2cd52160a0f7d599e2ca590e88.bin

.exe 52KB
out.upx

.exe 114KB

jaffacakes118_07ff1f83289f3ad2d7a19d734cb9137517ee7e2cd52160a0f7d599e2ca590e88.bin

SHA256 07ff1f83289f3ad2d7a19d734cb9137517ee7e2cd52160a0f7d599e2ca590e88
MD5 32254a9009a89147f5cfbd03ba2cee84
SHA1 578439fa4e02a795e44945bb2cb1edd1cb9245ab
SHA512 182c62bd60ac437c4bf8781f74eb49e29312382f066d6acda72db90c91a0c996716c018522db5d3c516463286e8e3dee1f8c8c2d6b621ecf6f55152dd8ee0904
SSDEEP 1536:lwQOArLirM/JWcSUScDXyjpdNyOUT9m/WTBeYd:lXrLGoUT1hFKO2m/0B
TLSH
T1AD33F15647C2C963CA5089B01B0B20F3A6F250975B4C57DFA1E1335DEEFE798A80E48E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

147488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

out.upx

SHA256 e0388b7f87de17c7a10604e06f47460906d5303fe9c2210aa673346e7d81358e
MD5 ab934f25cd0007add8fc7291aa7936c5
SHA1 faec2523a2f08ba824fe7051c84321be7db6db3a
SHA512 92054dbb718500d1f4d6c3169ffc6e762bae69e05dbeeb0c22534a8b46738017ad1d9c2501a503394c464c1b0f63bd5f0dc2bc221e4703aec1e5ac31b4f14c68
SSDEEP 1536:R+qdEnvFVfITjOh48/qIezBF9fo8hQOXO6Y3QRxknbWbZUcG:ZYUmhX/qI2B33GOe6Y1W9
TLSH
T1B4B34A52F591C872C41509B8CD0AA5F8952ABD02BE2C558777FD3E0DFD3EA02397E292
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

96104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

90KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

jaffacakes118_07ff1f83289f3ad2d7a19d734cb9137517ee7e2cd52160a0f7d599e2ca590e88.bin

generic

out.upx

generic