jaffacakes118_937f81c6d5f3cf94252d0fdcd38b5b0f516b42ca742b355101eda3474d3eeebe.bin
- SHA256 937f81c6d5f3cf94252d0fdcd38b5b0f516b42ca742b355101eda3474d3eeebe
Behavioral task
behavioral1
Sample
_.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
_.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
23 signatures
150 seconds
Behavioral task
behavioral3
Sample
lriley-yj07965nnt.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target jaffacakes118_937f81c6d5f3cf94252d0fdcd38b5b0f516b42ca742b355101eda3474d3eeebe.bin
- Size 2.7MB
- Sample260925-zy86yszvbv
- SHA256 937f81c6d5f3cf94252d0fdcd38b5b0f516b42ca742b355101eda3474d3eeebe
- MD5 58b5b8771c6ebd98e69f5073a4b2116f
- SHA1 0b882a395d65449d2a4e3b38f07a19684055f5e9
- SHA512 60666ff5a17263475d65c93293a3c72af14996ef79d42767ff892aa2e0b5102a894165d00071dbe5d6b928a6bf9260fd983ccfb803d771021a48cb9ac46e923b
- SSDEEP 49152:EuWUM1nZPSvkvxERH165i49Sbju7qHxlDcY4MSZvOzHH3SVp5vKQmOrMprSiv:Eu7bG5zcju+HxJcJMSMn3yp5DMnv
- TLSH T12BD5336133A9CAD488D5E5480F523FDB6268DCC4474652E5E62A3BC7ADC3D90FACC0E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/_ upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/_ unpack002/out.upx
File Explorer
-
jaffacakes118_937f81c6d5f3cf94252d0fdcd38b5b0f516b42ca742b355101eda3474d3eeebe.bin.zip 2.7MB
-
_.exe 2.7MB
-
out.upx.exe 5.1MB
-
lriley-yj07965nnt.vbs187KB
_
- SHA256 b71c625275e9e070cbdf14192ad8bb139a2c7ce8d8ce9f7aab9c7a8cc9ac0a5a
- MD5 85f80691c9e8407a1eb9663512fce110
- SHA1 16a0dda3a36950f7eaf1bcb9472c94cc12d2d565
- SHA512 830b0a9394d71a1441205ff5360cdc3e530efd5e1be11dd2fb475f05adf0eda124c6962d142819199a3b2bb4477002ff85d00b92183f2e93c8ed01d1cc36c829
- SSDEEP 49152:Cm0R3bnWhBg6/7G0yIycIjOQoh86dXlX3+cJooFhwcjDQWesbsG:XG3bnWg6jG0yIy4QoxX9QozjDQWXbt
- TLSH T13BD533D335804534F582A2F773327A2A1B18BC259735CE8F6468BD478BF51824BE67A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
5389504
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
33KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 8f93a8e095d52a0ed4b50732ea6845231ae81133c5b398c3a044d6bef0720223
- MD5 466838dd9989f7d4c3a3a2c13cc48048
- SHA1 73aa5f51680c9afb6b7b125688af113e4430519f
- SHA512 fad2ccbd385b4fc86500ccbac50be1d9cfdd43a22bae658a063c211fa7d04d4a2b17a6837f0c6bffd997d606e7971838ed366eb15ba3b0eda0afaba8cee9433a
- SSDEEP 98304:gPU6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwC:Qb5SoaeubVDZVGPXbBve5GZPQn4v5j5p
- TLSH T132367D42F1923070E9AF59B1FC7CAA6A1F297D1A5BF184DB71C41C485FB02C0B635B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
55164
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
270KB
Virtual Size
269KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.voltbl
Size
512B
Virtual Size
118B
Characteristics
Name
.rsrc
Size
4.8MB
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
lriley-yj07965nnt.vbs
- SHA256 360154387ae3f1c820d5f03d970c8ec609084d1a85c582bf32354fd96427c475
- MD5 e21716c8deb9ba9bbdae7df3f4756d6f
- SHA1 e5c50b4f3e9a737f86835e87eb9bdccc667c3034
- SHA512 256cedeaff970a091aa31684aea561b93b494425873ff2d094b79be7513805c13f6cda5323109085c83287578a4a87fd8fa494ca81c24478809594abe5dc8b68
- SSDEEP 3072:nE1J3JKcdALhwP/ZFFYhRGmFgskJSh0uuc289u/oBzeh42LjStLj6r/TVVDLf6La:EVKc2w/Zro8mFD1FBzehfQjm/TYU
- TLSH T1FB14CF80A7CCCF520B5C4B2BC15D9BD6D79FD18CDE58A26EE339B06A844592313BF428
- MD5 SHA1 SHA512 SSDEEP TLSH