jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin
Size 143KB
Sample260925-wbl65asfjb
SHA256 c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3
MD5 360bd5f668c32ad045948b3bc5ce5cba
SHA1 8740826229af3d4d67a0b4ce76b668fd7fe96b84
SHA512 cf9af41920b874606cec1162b4a212066ddf8f199c04224a88a9a9147251d758cc3ec3d8c70e5057feb7312aeb948a65465ed4e71953cc3815c4ffbe27bb91c6
SSDEEP 3072:mF2OQrUlA7HN088UFql/NlkaVHLIjVuPpi/6Fi9T0w8a3bwYE+/t:WQrL21dNl5Y6spbL3kYE+
TLSH
T139E36C25B2F38872C2B37F784D029E98A43E79613D75205A73E91F0D5D78BA46A2C353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin

File Explorer

jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin

.exe 143KB

jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin

SHA256 c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3
MD5 360bd5f668c32ad045948b3bc5ce5cba
SHA1 8740826229af3d4d67a0b4ce76b668fd7fe96b84
SHA512 cf9af41920b874606cec1162b4a212066ddf8f199c04224a88a9a9147251d758cc3ec3d8c70e5057feb7312aeb948a65465ed4e71953cc3815c4ffbe27bb91c6
SSDEEP 3072:mF2OQrUlA7HN088UFql/NlkaVHLIjVuPpi/6Fi9T0w8a3bwYE+/t:WQrL21dNl5Y6spbL3kYE+
TLSH
T139E36C25B2F38872C2B37F784D029E98A43E79613D75205A73E91F0D5D78BA46A2C353
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

172032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

12B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

ShenLan

Size

44B

Virtual Size

44B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin

generic