jaffacakes118_34f2fe909a92ae069fa9fd1dbfed09c7be577699c125dff083a2990cd630d24d[.]bin

General

Target
jaffacakes118_34f2fe909a92ae069fa9fd1dbfed09c7be577699c125dff083a2990cd630d24d.bin
Size 46KB
Sample260925-w9dmmsvs7m
SHA256 34f2fe909a92ae069fa9fd1dbfed09c7be577699c125dff083a2990cd630d24d
MD5 c8ca3f5ee4e275af3b0c9d26bb56f8a6
SHA1 5f98afe677feeda97873f03b1071e07be9beab51
SHA512 4a666ab66e04d6801d461ee3d3c766bf4fcadafc3aa8f46f56eb404c66a370c6bc71b54d7244d55ae4832e72664c35aec43084bc97ea536f4bba664fc4472c87
SSDEEP 768:xBvfUsVULZtukhsWpebA84XIe/FoD1fXGYMpwuSS+iCaEuYl2:D3VotukhBCAFFqfxPBiCaT
TLSH
T132237E431E8A28F0D61FE37534AB2B7FE134959000D9C1595B62FC96642B273B7BE683
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_34f2fe909a92ae069fa9fd1dbfed09c7be577699c125dff083a2990cd630d24d.bin

File Explorer

jaffacakes118_34f2fe909a92ae069fa9fd1dbfed09c7be577699c125dff083a2990cd630d24d.bin

.dll 46KB

jaffacakes118_34f2fe909a92ae069fa9fd1dbfed09c7be577699c125dff083a2990cd630d24d.bin

SHA256 34f2fe909a92ae069fa9fd1dbfed09c7be577699c125dff083a2990cd630d24d
MD5 c8ca3f5ee4e275af3b0c9d26bb56f8a6
SHA1 5f98afe677feeda97873f03b1071e07be9beab51
SHA512 4a666ab66e04d6801d461ee3d3c766bf4fcadafc3aa8f46f56eb404c66a370c6bc71b54d7244d55ae4832e72664c35aec43084bc97ea536f4bba664fc4472c87
SSDEEP 768:xBvfUsVULZtukhsWpebA84XIe/FoD1fXGYMpwuSS+iCaEuYl2:D3VotukhBCAFFqfxPBiCaT
TLSH
T132237E431E8A28F0D61FE37534AB2B7FE134959000D9C1595B62FC96642B273B7BE683
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20888

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

985KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.UPX0

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.UPX1

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_34f2fe909a92ae069fa9fd1dbfed09c7be577699c125dff083a2990cd630d24d.bin

generic