jaffacakes118_1090a4c5fa6a5568efaff577a029d6ab39ea45ebc6acdf1c488c1a11160d62c3[.]bin

General

Target
jaffacakes118_1090a4c5fa6a5568efaff577a029d6ab39ea45ebc6acdf1c488c1a11160d62c3.bin
Size 133KB
Sample260925-ydydaaws6k
SHA256 1090a4c5fa6a5568efaff577a029d6ab39ea45ebc6acdf1c488c1a11160d62c3
MD5 758d69bc3b9d1a9d7f5d9581049ef0d6
SHA1 8dcb422a0286e34295c7ab04f3923f0f9a06dc5c
SHA512 f73ccb7a8f100413f8634f8395085612e7c2e9f55ce0386237829cfda6aef7929db9e64d4adc5380979723c7abb6945674df077079d6284216da67aa8afc8a0e
SSDEEP 3072:x+f5i7E9SlWtVAO0OJvI11RkyHjVqJ2l5eS551QF:qi7EsWn/3+yyHjYqpi
TLSH
T150D39C02F2E188B9D513107004E75B765ABBFD304F1A6783EBB1EDC66CF4560AA2E257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_1090a4c5fa6a5568efaff577a029d6ab39ea45ebc6acdf1c488c1a11160d62c3.bin

File Explorer

jaffacakes118_1090a4c5fa6a5568efaff577a029d6ab39ea45ebc6acdf1c488c1a11160d62c3.bin

.exe 133KB

jaffacakes118_1090a4c5fa6a5568efaff577a029d6ab39ea45ebc6acdf1c488c1a11160d62c3.bin

SHA256 1090a4c5fa6a5568efaff577a029d6ab39ea45ebc6acdf1c488c1a11160d62c3
MD5 758d69bc3b9d1a9d7f5d9581049ef0d6
SHA1 8dcb422a0286e34295c7ab04f3923f0f9a06dc5c
SHA512 f73ccb7a8f100413f8634f8395085612e7c2e9f55ce0386237829cfda6aef7929db9e64d4adc5380979723c7abb6945674df077079d6284216da67aa8afc8a0e
SSDEEP 3072:x+f5i7E9SlWtVAO0OJvI11RkyHjVqJ2l5eS551QF:qi7EsWn/3+yyHjYqpi
TLSH
T150D39C02F2E188B9D513107004E75B765ABBFD304F1A6783EBB1EDC66CF4560AA2E257
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

43359

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

18KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qidian0

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_1090a4c5fa6a5568efaff577a029d6ab39ea45ebc6acdf1c488c1a11160d62c3.bin

generic