jaffacakes118_f627e310dc2472e4cb2e3cd53b754d2b4a3894510f8a21abe79dd38028a940fb[.]bin

General

Target
jaffacakes118_f627e310dc2472e4cb2e3cd53b754d2b4a3894510f8a21abe79dd38028a940fb.bin
Size 201KB
Sample260925-vt64ksts3q
SHA256 f627e310dc2472e4cb2e3cd53b754d2b4a3894510f8a21abe79dd38028a940fb
MD5 31df1ce08ff63a2ac3f406771df2e18c
SHA1 d759feaec0f54513c32062eb9e107aabb537967c
SHA512 2105c6ea6c8ad9f8069459bc6503dc166315349f15a240d2b7e2071c2a6edc51c3bc3fc327f4e7035fc6df14f3d34b6c0bd77d330b8e1e08b5396f6e9515ae2f
SSDEEP 3072:jJZv/GD0Y2IafTZPqIrRpDT7fsVM/YUZoHmyM36jKgCcIl7/Gc7icZrLH:NZXTBIa8Irdn+HmycgCcIFOI
TLSH
T18A145C36E1D08933D0761E7CCE96A2E5B51EBF602D3C154F79E81E4C897A2D26A193C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_f627e310dc2472e4cb2e3cd53b754d2b4a3894510f8a21abe79dd38028a940fb.bin

File Explorer

jaffacakes118_f627e310dc2472e4cb2e3cd53b754d2b4a3894510f8a21abe79dd38028a940fb.bin

.dll 201KB

jaffacakes118_f627e310dc2472e4cb2e3cd53b754d2b4a3894510f8a21abe79dd38028a940fb.bin

SHA256 f627e310dc2472e4cb2e3cd53b754d2b4a3894510f8a21abe79dd38028a940fb
MD5 31df1ce08ff63a2ac3f406771df2e18c
SHA1 d759feaec0f54513c32062eb9e107aabb537967c
SHA512 2105c6ea6c8ad9f8069459bc6503dc166315349f15a240d2b7e2071c2a6edc51c3bc3fc327f4e7035fc6df14f3d34b6c0bd77d330b8e1e08b5396f6e9515ae2f
SSDEEP 3072:jJZv/GD0Y2IafTZPqIrRpDT7fsVM/YUZoHmyM36jKgCcIl7/Gc7icZrLH:NZXTBIa8Irdn+HmycgCcIFOI
TLSH
T18A145C36E1D08933D0761E7CCE96A2E5B51EBF602D3C154F79E81E4C897A2D26A193C3
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

178260

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

170KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_f627e310dc2472e4cb2e3cd53b754d2b4a3894510f8a21abe79dd38028a940fb.bin

generic