jaffacakes118_8beb6ee9359de22c71216ea17afdc29bdc3e8bfd4b18f53c6f91cf3187a46d88[.]bin

General

Target
jaffacakes118_8beb6ee9359de22c71216ea17afdc29bdc3e8bfd4b18f53c6f91cf3187a46d88.bin
Size 201KB
Sample260925-vww2dsts6m
SHA256 8beb6ee9359de22c71216ea17afdc29bdc3e8bfd4b18f53c6f91cf3187a46d88
MD5 fafa2809433c1be861b337d089dd70c9
SHA1 be37d2a59ad20ca177fd2b6430af2ab14aa1418f
SHA512 066a3c39df8e9bd157997b26bb66b5b7ff07d40ab1cbab40058cee86d5edffefdb3269d7a30ae8cb028d3ccffd1882bb91eed6de6a3252bea69e5e1f583b5e99
SSDEEP 3072:QJZad7ER5Qs0KyJcL77yN8rHMKbllpIH25YZbAWfvWxD0oMpTIhEAA+o72Vcgm3L:mZnHQs0pu773425MMWf+x5hHE
TLSH
T14B146D3AF1C09937D0761E7CCE9662E5751ABF602D3C254F79E80E4C99392D26A293C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_8beb6ee9359de22c71216ea17afdc29bdc3e8bfd4b18f53c6f91cf3187a46d88.bin

File Explorer

jaffacakes118_8beb6ee9359de22c71216ea17afdc29bdc3e8bfd4b18f53c6f91cf3187a46d88.bin

.dll 201KB

jaffacakes118_8beb6ee9359de22c71216ea17afdc29bdc3e8bfd4b18f53c6f91cf3187a46d88.bin

SHA256 8beb6ee9359de22c71216ea17afdc29bdc3e8bfd4b18f53c6f91cf3187a46d88
MD5 fafa2809433c1be861b337d089dd70c9
SHA1 be37d2a59ad20ca177fd2b6430af2ab14aa1418f
SHA512 066a3c39df8e9bd157997b26bb66b5b7ff07d40ab1cbab40058cee86d5edffefdb3269d7a30ae8cb028d3ccffd1882bb91eed6de6a3252bea69e5e1f583b5e99
SSDEEP 3072:QJZad7ER5Qs0KyJcL77yN8rHMKbllpIH25YZbAWfvWxD0oMpTIhEAA+o72Vcgm3L:mZnHQs0pu773425MMWf+x5hHE
TLSH
T14B146D3AF1C09937D0761E7CCE9662E5751ABF602D3C254F79E80E4C99392D26A293C3
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

178416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

170KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_8beb6ee9359de22c71216ea17afdc29bdc3e8bfd4b18f53c6f91cf3187a46d88.bin

generic