jaffacakes118_7b6bc850dca208742407a59b67a18c422a32170f7373741327473d7114465647[.]bin

General

Target
jaffacakes118_7b6bc850dca208742407a59b67a18c422a32170f7373741327473d7114465647.bin
Size 45KB
Sample260925-xk6skathpc
SHA256 7b6bc850dca208742407a59b67a18c422a32170f7373741327473d7114465647
MD5 d026ec33efb9e71ef0c24ac96af92f4f
SHA1 1d00c0ad50bd0d4ea5e9832e0a41463d53cd2946
SHA512 2261ca188e3baf2158a0db41de102ab9e803e6bacb7e7e49a5227cad23f689165b9f3f8c07870b537f8d796c342ce70cc40eb1097ff44d363da428aef689a385
SSDEEP 768:PZc5cSmfD942b0w2Br+JQuGqsZkAIVgDS3hWeqoTNp45MYGkVy5vMICb4C:Pm5cDvYdrWQuGqjN3soznYGn5vMICb4C
TLSH
T1C9234CA7B880D473F0608CFC6D19E686766F72791D362487B9A60FCE9C7998342CC467
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_7b6bc850dca208742407a59b67a18c422a32170f7373741327473d7114465647.bin

File Explorer

jaffacakes118_7b6bc850dca208742407a59b67a18c422a32170f7373741327473d7114465647.bin

.dll 45KB

jaffacakes118_7b6bc850dca208742407a59b67a18c422a32170f7373741327473d7114465647.bin

SHA256 7b6bc850dca208742407a59b67a18c422a32170f7373741327473d7114465647
MD5 d026ec33efb9e71ef0c24ac96af92f4f
SHA1 1d00c0ad50bd0d4ea5e9832e0a41463d53cd2946
SHA512 2261ca188e3baf2158a0db41de102ab9e803e6bacb7e7e49a5227cad23f689165b9f3f8c07870b537f8d796c342ce70cc40eb1097ff44d363da428aef689a385
SSDEEP 768:PZc5cSmfD942b0w2Br+JQuGqsZkAIVgDS3hWeqoTNp45MYGkVy5vMICb4C:Pm5cDvYdrWQuGqjN3soznYGn5vMICb4C
TLSH
T1C9234CA7B880D473F0608CFC6D19E686766F72791D362487B9A60FCE9C7998342CC467
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

39412

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

83B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_7b6bc850dca208742407a59b67a18c422a32170f7373741327473d7114465647.bin

generic