jaffacakes118_157d7a8f7983aabfaf6e039fa334ca86844843d1278d19425dd52a516ee9c84f[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_157d7a8f7983aabfaf6e039fa334ca86844843d1278d19425dd52a516ee9c84f.bin
Size 261KB
Sample260925-v8zm2ssemb
SHA256 157d7a8f7983aabfaf6e039fa334ca86844843d1278d19425dd52a516ee9c84f
MD5 88adbbd2bbc674f53090e9b9d7a77dfb
SHA1 14ceed6c4f49ec56c2742ada5bd6bc398940b962
SHA512 7fdb0f2e29c3a4a0d959261a779f2a0be2283c2e82455abae9717f32768d1f0ee1e2c73951f7efd23ebb714fc47b1329609e5115dc964c4f2a6673b3df35e50f
SSDEEP 1536:f4pzVjxtmcI3ChCCGSOO/i5fRqZpP4v5fC/VWOsLUu2SURDD:YzHtm5O6b5fRqLsAcMu2SURDD
TLSH
T15C44E51D27EEC5B4F1ABFA7D575B79C303B45878673B8282E40830A90EDBA385DB0512
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_157d7a8f7983aabfaf6e039fa334ca86844843d1278d19425dd52a516ee9c84f.bin

File Explorer

jaffacakes118_157d7a8f7983aabfaf6e039fa334ca86844843d1278d19425dd52a516ee9c84f.bin

.exe 261KB

jaffacakes118_157d7a8f7983aabfaf6e039fa334ca86844843d1278d19425dd52a516ee9c84f.bin

SHA256 157d7a8f7983aabfaf6e039fa334ca86844843d1278d19425dd52a516ee9c84f
MD5 88adbbd2bbc674f53090e9b9d7a77dfb
SHA1 14ceed6c4f49ec56c2742ada5bd6bc398940b962
SHA512 7fdb0f2e29c3a4a0d959261a779f2a0be2283c2e82455abae9717f32768d1f0ee1e2c73951f7efd23ebb714fc47b1329609e5115dc964c4f2a6673b3df35e50f
SSDEEP 1536:f4pzVjxtmcI3ChCCGSOO/i5fRqZpP4v5fC/VWOsLUu2SURDD:YzHtm5O6b5fRqLsAcMu2SURDD
TLSH
T15C44E51D27EEC5B4F1ABFA7D575B79C303B45878673B8282E40830A90EDBA385DB0512
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

200702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

212KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

16.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_157d7a8f7983aabfaf6e039fa334ca86844843d1278d19425dd52a516ee9c84f.bin

generic