jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.bin
Size 121KB
Sample260925-ffed3sttct
SHA256 cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74
MD5 e133bda159ab8eaed676aebba9257886
SHA1 9141af1483f1c91e7760a7fedcd9523197e8bf0c
SHA512 40127091c11bb527e3b3120340d8760a30f0e30aa2d0042eb64827c6c1f889967b9ad4e6263179b1a099a4c31618223a3a0feb8894142cd0f633848bd6cf446e
SSDEEP 1536:JEd+ad8dIn9L38irQ7rubcCL4hlQoKt/ZUx4ZJa3ZZwhJYfBHFx:i+aydc9LMxuB8qtpo4ZJS8hCfBHFx
TLSH
T1E2C37B13B3904576C052593C8C4B92B5FA3D3A316EE5259ABDF22F1CDE3D2821D693A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.bin

File Explorer

jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.bin

.exe 121KB

jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.bin

SHA256 cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74
MD5 e133bda159ab8eaed676aebba9257886
SHA1 9141af1483f1c91e7760a7fedcd9523197e8bf0c
SHA512 40127091c11bb527e3b3120340d8760a30f0e30aa2d0042eb64827c6c1f889967b9ad4e6263179b1a099a4c31618223a3a0feb8894142cd0f633848bd6cf446e
SSDEEP 1536:JEd+ad8dIn9L38irQ7rubcCL4hlQoKt/ZUx4ZJa3ZZwhJYfBHFx:i+aydc9LMxuB8qtpo4ZJS8hCfBHFx
TLSH
T1E2C37B13B3904576C052593C8C4B92B5FA3D3A316EE5259ABDF22F1CDE3D2821D693A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

100920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

96KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.bin

generic