jaffacakes118_a2466ac70c7af7075dfb52cff8b8fcd95f4f0d37ce94a79fbf653a86bf81909e[.]bin

General

Target
jaffacakes118_a2466ac70c7af7075dfb52cff8b8fcd95f4f0d37ce94a79fbf653a86bf81909e.bin
Size 48KB
Sample260925-xcap6axvdw
SHA256 a2466ac70c7af7075dfb52cff8b8fcd95f4f0d37ce94a79fbf653a86bf81909e
MD5 092e9ebf85816b19bc6b3c498f1e2512
SHA1 ffd703edcd590120237eaf7edf9e6b42a14aa6ca
SHA512 2b3e0bc3668fb1ba1263529ae2561bfd17540438bb8eaa146c2c713570451fa42ac83620e368a4f418eaccd516b5e4912bbe198fa25e10418ea2731a2e3c1402
SSDEEP 768:3C2q7FszUSqbzowsO8Msg9ddQ6UFayaAg3y+diQXUVOP5/mCYlz9T6u5:y2q7FsYSq/8MD9ddDIogCYnr5
TLSH
T155234B57D2C1C872C010D9FC9C2AE295FF2A3A706D292497BBAE2FCDC92E1D15A0C557
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_a2466ac70c7af7075dfb52cff8b8fcd95f4f0d37ce94a79fbf653a86bf81909e.bin

File Explorer

jaffacakes118_a2466ac70c7af7075dfb52cff8b8fcd95f4f0d37ce94a79fbf653a86bf81909e.bin

.dll 48KB

jaffacakes118_a2466ac70c7af7075dfb52cff8b8fcd95f4f0d37ce94a79fbf653a86bf81909e.bin

SHA256 a2466ac70c7af7075dfb52cff8b8fcd95f4f0d37ce94a79fbf653a86bf81909e
MD5 092e9ebf85816b19bc6b3c498f1e2512
SHA1 ffd703edcd590120237eaf7edf9e6b42a14aa6ca
SHA512 2b3e0bc3668fb1ba1263529ae2561bfd17540438bb8eaa146c2c713570451fa42ac83620e368a4f418eaccd516b5e4912bbe198fa25e10418ea2731a2e3c1402
SSDEEP 768:3C2q7FszUSqbzowsO8Msg9ddQ6UFayaAg3y+diQXUVOP5/mCYlz9T6u5:y2q7FsYSq/8MD9ddDIogCYnr5
TLSH
T155234B57D2C1C872C010D9FC9C2AE295FF2A3A706D292497BBAE2FCDC92E1D15A0C557
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

38456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

844B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_a2466ac70c7af7075dfb52cff8b8fcd95f4f0d37ce94a79fbf653a86bf81909e.bin

generic