jaffacakes118_c0847e21e402944b10b6ed9a9fd594f36fc65e0a26ab7db5a666c958f1a27d1a[.]bin

General

Target
jaffacakes118_c0847e21e402944b10b6ed9a9fd594f36fc65e0a26ab7db5a666c958f1a27d1a.bin
Size 46KB
Sample260925-xldheathph
SHA256 c0847e21e402944b10b6ed9a9fd594f36fc65e0a26ab7db5a666c958f1a27d1a
MD5 145d18839c9bba5b79ca89496d079447
SHA1 188d9f20d052219bf2e00a9013c7f3f3d3e812f4
SHA512 ca4590df3c63435b908c4a5db99f5ee8bb498e2d6dd04b0279d342647049d8617e7dc5d9f95212952c15bb522e82c6d5ee41e9c41477affd4838749d3d8284de
SSDEEP 768:PqdMCJu382M2sl/14DLAuhvla/8sAMFzW3JXGCPXTB+/EMgbEV/myH00EdQF+:P1Mrl/U0uitFW5lPXTsYbEzDEC
TLSH
T152234A67A880D077C06088BC9D2AE796F17F77752E322497BAA60FCD9C3E1C2925C553
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_c0847e21e402944b10b6ed9a9fd594f36fc65e0a26ab7db5a666c958f1a27d1a.bin

File Explorer

jaffacakes118_c0847e21e402944b10b6ed9a9fd594f36fc65e0a26ab7db5a666c958f1a27d1a.bin

.dll 46KB

jaffacakes118_c0847e21e402944b10b6ed9a9fd594f36fc65e0a26ab7db5a666c958f1a27d1a.bin

SHA256 c0847e21e402944b10b6ed9a9fd594f36fc65e0a26ab7db5a666c958f1a27d1a
MD5 145d18839c9bba5b79ca89496d079447
SHA1 188d9f20d052219bf2e00a9013c7f3f3d3e812f4
SHA512 ca4590df3c63435b908c4a5db99f5ee8bb498e2d6dd04b0279d342647049d8617e7dc5d9f95212952c15bb522e82c6d5ee41e9c41477affd4838749d3d8284de
SSDEEP 768:PqdMCJu382M2sl/14DLAuhvla/8sAMFzW3JXGCPXTB+/EMgbEV/myH00EdQF+:P1Mrl/U0uitFW5lPXTsYbEzDEC
TLSH
T152234A67A880D077C06088BC9D2AE796F17F77752E322497BAA60FCD9C3E1C2925C553
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

40796

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_c0847e21e402944b10b6ed9a9fd594f36fc65e0a26ab7db5a666c958f1a27d1a.bin

generic