jaffacakes118_15fa8623e3ca28f9b1fbe9077edea89799c6b3529ffc393f028c151be2766c92[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_15fa8623e3ca28f9b1fbe9077edea89799c6b3529ffc393f028c151be2766c92.bin
Size 1.5MB
Sample260924-lmg2faaf42
SHA256 15fa8623e3ca28f9b1fbe9077edea89799c6b3529ffc393f028c151be2766c92
MD5 e7f2d319f284704e095d5dfc5922857b
SHA1 b92d6280df08fd4e76c5a5e94e93ea5f12de8f38
SHA512 7093b26dbe538faf8622e64db3882dfdc4bc8ea9b0640bcbb3101b2379adc03ea9926c8059474da1db203e33bf3ca2cb222281bbd5cd3341e324214d0314e4e5
SSDEEP 24576:XD5oKMVbZOXR+3QsTicnw5kbif98JVNDJ644emTDF6C4RNlqqqEJ4J4J4JFfff8L:zAQglbCToC4RjqqqEJ4J4J4J
TLSH
T114659E12A3924433D0732F355DAB82586D26BE212AB498896FF89D0C5F797813D393F7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_15fa8623e3ca28f9b1fbe9077edea89799c6b3529ffc393f028c151be2766c92.bin

File Explorer

jaffacakes118_15fa8623e3ca28f9b1fbe9077edea89799c6b3529ffc393f028c151be2766c92.bin

.exe 1.5MB

jaffacakes118_15fa8623e3ca28f9b1fbe9077edea89799c6b3529ffc393f028c151be2766c92.bin

SHA256 15fa8623e3ca28f9b1fbe9077edea89799c6b3529ffc393f028c151be2766c92
MD5 e7f2d319f284704e095d5dfc5922857b
SHA1 b92d6280df08fd4e76c5a5e94e93ea5f12de8f38
SHA512 7093b26dbe538faf8622e64db3882dfdc4bc8ea9b0640bcbb3101b2379adc03ea9926c8059474da1db203e33bf3ca2cb222281bbd5cd3341e324214d0314e4e5
SSDEEP 24576:XD5oKMVbZOXR+3QsTicnw5kbif98JVNDJ644emTDF6C4RNlqqqEJ4J4J4JFfff8L:zAQglbCToC4RjqqqEJ4J4J4J
TLSH
T114659E12A3924433D0732F355DAB82586D26BE212AB498896FF89D0C5F797813D393F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1022948

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

991KB

Virtual Size

991KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

392KB

Virtual Size

392KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_15fa8623e3ca28f9b1fbe9077edea89799c6b3529ffc393f028c151be2766c92.bin

generic