jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.bin
Size 6.7MB
Sample260925-yblayavfnd
SHA256 cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65
MD5 9f19e5d9bf407acb2e71884024209238
SHA1 63ce6aa95b13a9ecb26a432e2aa5fd95eec43587
SHA512 39445a2c9c31ddbfd4ac0b0a0d903fd12bd154b9df59b0f96a6f023e8bc4e54710a5bdf8f8bd6ae2bdaddab0e0a350d76daef50ee4aeaf1984b790a4f89c0ce4
SSDEEP 49152:/xFqGRtp//Pg2+SpGX4SAtFPvApqDR+Jo/w4J1M9eeQ3NLI1GhPYCrjU+Yh:/v5FPvAEDI54CoNkilrYZ
TLSH
T16F66CF73A305E53FC05A1B351522852CDA7AEA11D1369C8E47F03848FF799B5262EE8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.bin

File Explorer

jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.bin

.exe 6.7MB

jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.bin

SHA256 cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65
MD5 9f19e5d9bf407acb2e71884024209238
SHA1 63ce6aa95b13a9ecb26a432e2aa5fd95eec43587
SHA512 39445a2c9c31ddbfd4ac0b0a0d903fd12bd154b9df59b0f96a6f023e8bc4e54710a5bdf8f8bd6ae2bdaddab0e0a350d76daef50ee4aeaf1984b790a4f89c0ce4
SSDEEP 49152:/xFqGRtp//Pg2+SpGX4SAtFPvApqDR+Jo/w4J1M9eeQ3NLI1GhPYCrjU+Yh:/v5FPvAEDI54CoNkilrYZ
TLSH
T16F66CF73A305E53FC05A1B351522852CDA7AEA11D1369C8E47F03848FF799B5262EE8F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1935224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

25KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

154B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

72B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

173KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

484KB

Virtual Size

483KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.bin

generic