jaffacakes118_543abe0a36379fe8b3ce7de93a7d3ad4e73cf5aaab3da9d09e6985e54ffaba82[.]bin

General

Target
jaffacakes118_543abe0a36379fe8b3ce7de93a7d3ad4e73cf5aaab3da9d09e6985e54ffaba82.bin
Size 244KB
Sample260925-vqlcps1hpb
SHA256 543abe0a36379fe8b3ce7de93a7d3ad4e73cf5aaab3da9d09e6985e54ffaba82
MD5 b7b5b237f89fb0699d74b45ba4870121
SHA1 2509cda73662ccfdf50fde1c07a26d891e24317d
SHA512 6498586e7eb1c55e090b05102f1759f8080e6a255a8fe8e6f0ae198bc16c01e5cd1a42360f65d1d2bd47828edf3d59a488be571e1d452b397421690405c2726d
SSDEEP 3072:ZFN9cutRjmth40kER+4pfV5mNSo2+Rxi/sKZi0bpd4DrJVJ4u:997GkER+4p95wSgi/M8kDrd7
TLSH
T1FE346DA666468CA5E52112BEC59FD7356B3CE2F406228773C378D835EE03A8375C634E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_543abe0a36379fe8b3ce7de93a7d3ad4e73cf5aaab3da9d09e6985e54ffaba82.bin

File Explorer

jaffacakes118_543abe0a36379fe8b3ce7de93a7d3ad4e73cf5aaab3da9d09e6985e54ffaba82.bin

.exe 244KB

jaffacakes118_543abe0a36379fe8b3ce7de93a7d3ad4e73cf5aaab3da9d09e6985e54ffaba82.bin

SHA256 543abe0a36379fe8b3ce7de93a7d3ad4e73cf5aaab3da9d09e6985e54ffaba82
MD5 b7b5b237f89fb0699d74b45ba4870121
SHA1 2509cda73662ccfdf50fde1c07a26d891e24317d
SHA512 6498586e7eb1c55e090b05102f1759f8080e6a255a8fe8e6f0ae198bc16c01e5cd1a42360f65d1d2bd47828edf3d59a488be571e1d452b397421690405c2726d
SSDEEP 3072:ZFN9cutRjmth40kER+4pfV5mNSo2+Rxi/sKZi0bpd4DrJVJ4u:997GkER+4p95wSgi/M8kDrd7
TLSH
T1FE346DA666468CA5E52112BEC59FD7356B3CE2F406228773C378D835EE03A8375C634E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED

PDB paths

Name

.text

Size

198KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

227KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.stab

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.stabstr

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_543abe0a36379fe8b3ce7de93a7d3ad4e73cf5aaab3da9d09e6985e54ffaba82.bin

generic