jaffacakes118_fadaefab7a29a9d69641284bf57cbee362c16bfbb2b100388ee78bf6f89cb78b[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_fadaefab7a29a9d69641284bf57cbee362c16bfbb2b100388ee78bf6f89cb78b.bin
Size 686KB
Sample260925-vtn8rss19n
SHA256 fadaefab7a29a9d69641284bf57cbee362c16bfbb2b100388ee78bf6f89cb78b
MD5 3ecc3a41cd8dec1a52ad1635f5807dae
SHA1 5d6b8d95631ee79c72014027ecd6cac66076ac03
SHA512 73d3ae33367703c187880827f814ee424e6c4c964a63bb4e671d82252298d6148a1d0ada4f1d3ed986b55e567e33d29d667820f4018f44cc19279c445bd6092d
SSDEEP 12288:Xs0V6NURhT3TOQKkTicHy5s/GmKHhfF7rHcreelR5GO9msSfywW34xHTqSn4Hinu:t46hTjHKkGjs/YH9F7rMeiJSfyzsHTBQ
TLSH
T1E1E42203B1C4C17AC6B63AB90C36F35EA57BB9B11D5C921B7BD80C0D2D6AA90542C2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_fadaefab7a29a9d69641284bf57cbee362c16bfbb2b100388ee78bf6f89cb78b.bin

File Explorer

jaffacakes118_fadaefab7a29a9d69641284bf57cbee362c16bfbb2b100388ee78bf6f89cb78b.bin

.dll 686KB

jaffacakes118_fadaefab7a29a9d69641284bf57cbee362c16bfbb2b100388ee78bf6f89cb78b.bin

SHA256 fadaefab7a29a9d69641284bf57cbee362c16bfbb2b100388ee78bf6f89cb78b
MD5 3ecc3a41cd8dec1a52ad1635f5807dae
SHA1 5d6b8d95631ee79c72014027ecd6cac66076ac03
SHA512 73d3ae33367703c187880827f814ee424e6c4c964a63bb4e671d82252298d6148a1d0ada4f1d3ed986b55e567e33d29d667820f4018f44cc19279c445bd6092d
SSDEEP 12288:Xs0V6NURhT3TOQKkTicHy5s/GmKHhfF7rHcreelR5GO9msSfywW34xHTqSn4Hinu:t46hTjHKkGjs/YH9F7rMeiJSfyzsHTBQ
TLSH
T1E1E42203B1C4C17AC6B63AB90C36F35EA57BB9B11D5C921B7BD80C0D2D6AA90542C2DF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

94104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

70B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qbi0

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qbi1

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_fadaefab7a29a9d69641284bf57cbee362c16bfbb2b100388ee78bf6f89cb78b.bin

generic