jaffacakes118_d13f59d7f22131a65d3ef9075ac4de32daebfc428aa5257f92902cf487633f39.bin
- SHA256 d13f59d7f22131a65d3ef9075ac4de32daebfc428aa5257f92902cf487633f39
Overview
overview
6Static
static
3ESPERANT.ps1
windows10-2004-x64
6ESPERANT.ps1
windows11-ltsc_2024-x64
6ESPERANT.exe
windows10-2004-x64
ESPERANT.exe
windows11-ltsc_2024-x64
ESPO_NE.exe
windows10-2004-x64
ESPO_NE.exe
windows11-ltsc_2024-x64
ESPO_PE.exe
windows10-2004-x64
ESPO_PE.exe
windows11-ltsc_2024-x64
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ESPERANT.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ESPERANT.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
ESPERANT.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
ESPERANT.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
ESPO_NE.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
ESPO_NE.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
ESPO_PE.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
ESPO_PE.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target jaffacakes118_d13f59d7f22131a65d3ef9075ac4de32daebfc428aa5257f92902cf487633f39.bin
- Size 38KB
- Sample260928-e11mdavs3m
- SHA256 d13f59d7f22131a65d3ef9075ac4de32daebfc428aa5257f92902cf487633f39
- MD5 70d0e2105a45622ff6ae11c7fa310ba4
- SHA1 f261f4d6b0c61513461b85b1eea17c51df3030ef
- SHA512 7b880b9b4f953a047315e4fede97170e22fba7076e829803a1b9efb8cb25488494001b479fa21256ee0771940e55b9fd475f398a5bfec53858e4ede23fbd83bf
- SSDEEP 768:9aR1ARRB9w9w+nKoCh7x5P69HA0vSL4AMQPsjMHYiNEdKW4SYMnaPMrFnQ/9DIOZ:VmVnZCaAoSsAKNdb47MrFQ/dIOuza
- TLSH T10D03F16B0880D94254EC572A716EDFACD0FC36999CA23DB9C164181E92C6FCD6A40F47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ESPERANT.EXE
File Explorer
-
jaffacakes118_d13f59d7f22131a65d3ef9075ac4de32daebfc428aa5257f92902cf487633f39.bin.zip 38KB
-
ESPERANT.COM.ps1 17KB
-
ESPERANT.EXE.exe 15KB
-
ESPO_NE.EXE21KB
-
ESPO_PE.EXE10KB
ESPERANT.COM
- SHA256 ae77cccaa922a27e51e7f0750d3e9b10744686bad3aacf1e6dc488be40f7413c
- MD5 6048359d409bf16e4898166306ecedc9
- SHA1 ed29eaf00183e52972446436e4473f1742d6ec7f
- SHA512 fdc8e25895669e751cb338a325a38696ef311a278aa410326b0fa1e9c6c4346f81ddac74eedaddf2490e3518e8ea3c1adc8752133e84bdc00d5f8d249643564d
- SSDEEP 384:IS4LGd82Mnz5kPkpN/ayUmszobQ6LOHF0abZBjtClozm+2Xeg3ktV3GXfrmIzDIO:ULib3y/FOwDATw4s5CARL
- TLSH T12F825D1C8F460693C7711534EFAA51C4F76A809F7A5A59823CCC93BC3B74B6192E639C
- MD5 SHA1 SHA512 SSDEEP TLSH
ESPERANT.EXE
- IMPHASH d233ebceca5a9a7590d8091000d1bbf7
- SHA256 6347e7550bca3e414f96fe212d3cdf24d3e0956423c4d9cb9b92ccb561c0948c
- MD5 8f1a55a66ef7450511aab207ceb90909
- SHA1 52a889c52fece95937efa3e733a03e960b26a71f
- SHA512 9c19cd398f601e40809d1f94783bb7e2969c6fe677505ec9b5cbf4e03af5651ef9ca071f6d7b27c8de397fabec4e33488f223aaf18e874c18c444dcabce25133
- SSDEEP 384:qpsDsmtnc0GALxiugru699IUDS4zUgRZE:qmDsmKALArtCgR2
- TLSH T1C1622A067E350CC1C6D9097505A7F6B85A87AC55395C20876FB0FE9F2C38391BA632BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27856
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
PulseEvent
Sleep
lstrlenA
CreateEventA
OpenEventA
ExitThread
lstrcpyA
WaitForSingleObject
CreateThread
CreateProcessA
GlobalFree
lstrcmpA
ReadFile
GlobalAlloc
GetFileSize
CreateFileA
GetDriveTypeA
GetLogicalDriveStringsA
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
CloseHandle
user32
DispatchMessageA
PostThreadMessageA
PostMessageA
DefWindowProcA
RegisterClassA
GetMessageA
CreateWindowExA
gdi32
GetStockObject
msvcrt
_acmdln
_initterm
__getmainargs
_controlfp
memcpy
_exit
_XcptFilter
exit
_adjust_fdiv
__setusermatherr
__set_app_type
__p__commode
__p__fmode
_except_handler3
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
ESPO_NE.EXE
- SHA256 78702049a75b0f947503a02432842ecdbb6c9977d1b8483aa69d21e8b3453e35
- MD5 9cb344bea327c350c4c52a0734153f76
- SHA1 fa98ce58d4ed920e6a02cd809285706902e8e378
- SHA512 8045a6134f7b02435235aa1585d02756bbbb35134f271ae4a8da34f8aafc96ef79a319d1f57e450586033b200f032886253c535811d10415159da1e539aaa97a
- SSDEEP 384:jKfBQWNDJdABECMZDNW03bFUnseFYhW7iFvbIiYeaAarIIUDS4zUARZY:++WlwBtMlNH5QdYW+bSeNTCAR6
- TLSH T192A28D1998248533D6BE8AFC3CAAC458C11E80561FD410685FECDD48A329A513BB7F7F
- MD5 SHA1 SHA512 SSDEEP TLSH
ESPO_PE.EXE
- SHA256 cb0a134cd2f385215d2b808841014bf6ef1d75f97d2f281f64dae5d80ea7e651
- MD5 aaf654d9df461627ac159c059dd9f435
- SHA1 aecf734d6be784d62d18ffb8d69f8d9b72648c7e
- SHA512 1b2caeaf08791cb55fc2f1a334312933099fb9c727d9147ad7640cb1043542f35eb1163df3e9242a6f90f70c9fd2b030d0f208c97258b02427a8a83509dec5b2
- SSDEEP 192:ziP8Qju26JwXSI0MBB2YpUnTjMwjIiFVUDJcudXhZUAReoQHhU4+:ziP1juar0MBTiT4wk+VUDS4zUARZx
- TLSH T176225B33AA35F881C8940C7608B3C35B9651DE015D9A05EB36FC7B97357CBC2A7845B9
- MD5 SHA1 SHA512 SSDEEP TLSH