jaffacakes118_d4e44430d3528f7bf6f7fbf5f704109f19a789325812ab0e72989aa21c82d814[.]bin

General

Target
jaffacakes118_d4e44430d3528f7bf6f7fbf5f704109f19a789325812ab0e72989aa21c82d814.bin
Size 188KB
Sample260925-3fagfsygpf
SHA256 d4e44430d3528f7bf6f7fbf5f704109f19a789325812ab0e72989aa21c82d814
MD5 8c8b0f0780c0853ec9935f5246ccae1d
SHA1 204bcb6a8777ced1a5e98f6c8e67736d1b308fda
SHA512 22acc4c690915fcde10ac10f3db82fa89432ad42d91d752d2b89746cae424e8e09d586614a3d9bc560eebc761c63c4752e5a0789135160201fe08d81f63f2f9f
SSDEEP 3072:/8q9Jihoczmf5dVzdOZRI4cq2nCch3c+gUIM97GCZfnnEK7a+vkRMKR/GdMx6VPq:/8Okhoc6f5dcRI4cFnVM+GM97ffnEK7Q
TLSH
T141149C26B581C03FD1A31534546FC7B20EB9BC312AB8E486FF940D6AAE646D1DB2531F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_d4e44430d3528f7bf6f7fbf5f704109f19a789325812ab0e72989aa21c82d814.bin

File Explorer

jaffacakes118_d4e44430d3528f7bf6f7fbf5f704109f19a789325812ab0e72989aa21c82d814.bin

.dll 188KB

jaffacakes118_d4e44430d3528f7bf6f7fbf5f704109f19a789325812ab0e72989aa21c82d814.bin

SHA256 d4e44430d3528f7bf6f7fbf5f704109f19a789325812ab0e72989aa21c82d814
MD5 8c8b0f0780c0853ec9935f5246ccae1d
SHA1 204bcb6a8777ced1a5e98f6c8e67736d1b308fda
SHA512 22acc4c690915fcde10ac10f3db82fa89432ad42d91d752d2b89746cae424e8e09d586614a3d9bc560eebc761c63c4752e5a0789135160201fe08d81f63f2f9f
SSDEEP 3072:/8q9Jihoczmf5dVzdOZRI4cq2nCch3c+gUIM97GCZfnnEK7a+vkRMKR/GdMx6VPq:/8Okhoc6f5dcRI4cFnVM+GM97ffnEK7Q
TLSH
T141149C26B581C03FD1A31534546FC7B20EB9BC312AB8E486FF940D6AAE646D1DB2531F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

89608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

AheadLib_LpkPresent AheadLib_ScriptApplyDigitSubstitution AheadLib_ScriptApplyLogicalWidth AheadLib_ScriptBreak AheadLib_ScriptCPtoX AheadLib_ScriptCacheGetHeight AheadLib_ScriptFreeCache AheadLib_ScriptGetCMap AheadLib_ScriptGetFontProperties AheadLib_ScriptGetGlyphABCWidth AheadLib_ScriptGetLogicalWidths AheadLib_ScriptGetProperties AheadLib_ScriptIsComplex AheadLib_ScriptItemize AheadLib_ScriptJustify AheadLib_ScriptLayout AheadLib_ScriptPlace AheadLib_ScriptRecordDigitSubstitution AheadLib_ScriptShape AheadLib_ScriptStringAnalyse AheadLib_ScriptStringCPtoX AheadLib_ScriptStringFree AheadLib_ScriptStringGetLogicalWidths AheadLib_ScriptStringGetOrder AheadLib_ScriptStringOut AheadLib_ScriptStringValidate AheadLib_ScriptStringXtoCP AheadLib_ScriptString_pLogAttr AheadLib_ScriptString_pSize AheadLib_ScriptString_pcOutChars AheadLib_ScriptTextOut AheadLib_ScriptXtoCP AheadLib_UspAllocCache AheadLib_UspAllocTemp AheadLib_UspFreeMem DecodePointer EncodePointer LpkDllInitialize LpkDrawTextEx LpkEditControl LpkExtTextOut LpkGetCharacterPlacement LpkGetTextExtentExPoint LpkInitialize LpkPSMTextOut LpkPresent LpkTabbedTextOut LpkUseGDIWidthCache MemCode_LpkDllInitialize MemCode_LpkDrawTextEx MemCode_LpkEditControl MemCode_LpkExtTextOut MemCode_LpkGetCharacterPlacement MemCode_LpkGetTextExtentExPoint MemCode_LpkInitialize MemCode_LpkPSMTextOut MemCode_LpkTabbedTextOut MemCode_LpkUseGDIWidthCache MemCode_ftsWordBreak ScriptApplyDigitSubstitution ScriptApplyLogicalWidth ScriptBreak ScriptCPtoX ScriptCacheGetHeight ScriptFreeCache ScriptGetCMap ScriptGetFontProperties ScriptGetGlyphABCWidth ScriptGetLogicalWidths ScriptGetProperties ScriptIsComplex ScriptItemize ScriptJustify ScriptLayout ScriptPlace ScriptRecordDigitSubstitution ScriptShape ScriptStringAnalyse ScriptStringCPtoX ScriptStringFree ScriptStringGetLogicalWidths ScriptStringGetOrder ScriptStringOut ScriptStringValidate ScriptStringXtoCP ScriptString_pLogAttr ScriptString_pSize ScriptString_pcOutChars ScriptTextOut ScriptXtoCP UspAllocCache UspAllocTemp UspFreeMem ftsWordBreak

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_d4e44430d3528f7bf6f7fbf5f704109f19a789325812ab0e72989aa21c82d814.bin

generic