jaffacakes118_3613c2b13c98ec3b04cb73b65e1f87c8de75306dc3f381dd61f27f874371cdbf[.]bin

General

Target
jaffacakes118_3613c2b13c98ec3b04cb73b65e1f87c8de75306dc3f381dd61f27f874371cdbf.bin
Size 4KB
Sample260928-e21nrsge57
SHA256 3613c2b13c98ec3b04cb73b65e1f87c8de75306dc3f381dd61f27f874371cdbf
MD5 cd0acf732adb68aa1bbf4831fafe5d5e
SHA1 8b442cc508a976babc67e78fc0ba367ccbc6010c
SHA512 610b43019c53cc82fb62e08478272faae0558bbfbcc684a5809733c9464664194e8bad1030a45a011431941157e777826d2903c3b8d5d0b92cd7c29d8ecdc588
SSDEEP 96:Q8F12JrKAiKqlwEAPGfN2AopgAUS31NIiFjYl19Ev6CG1nS4:Q8F12J+AiKNpPBWA/vIid69ESC0S4
TLSH
T12BA17CB5224F24CAE3274CB8EBF199C8811AD8F2585F24E7183D44BF6B12CA9138474D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Z0MBIE.EXE

File Explorer

jaffacakes118_3613c2b13c98ec3b04cb73b65e1f87c8de75306dc3f381dd61f27f874371cdbf.bin

.zip 4KB
Z0MBIE.COM

1KB
Z0MBIE.EXE

.exe 8KB

jaffacakes118_3613c2b13c98ec3b04cb73b65e1f87c8de75306dc3f381dd61f27f874371cdbf.bin

SHA256 3613c2b13c98ec3b04cb73b65e1f87c8de75306dc3f381dd61f27f874371cdbf
MD5 cd0acf732adb68aa1bbf4831fafe5d5e
SHA1 8b442cc508a976babc67e78fc0ba367ccbc6010c
SHA512 610b43019c53cc82fb62e08478272faae0558bbfbcc684a5809733c9464664194e8bad1030a45a011431941157e777826d2903c3b8d5d0b92cd7c29d8ecdc588
SSDEEP 96:Q8F12JrKAiKqlwEAPGfN2AopgAUS31NIiFjYl19Ev6CG1nS4:Q8F12J+AiKNpPBWA/vIid69ESC0S4
TLSH
T12BA17CB5224F24CAE3274CB8EBF199C8811AD8F2585F24E7183D44BF6B12CA9138474D
MD5 SHA1 SHA512 SSDEEP TLSH

Z0MBIE.EXE

SHA256 6fb15a85792d482233eaa45eaca893e00f2936608d652925f4c0c2981d34c18b
MD5 1cb21f6f376aaff5247c68e9bf72e56d
SHA1 adc77d3a419e810d8c9029783b751509ca69f6b4
SHA512 a4df2e44a3bcac2458372f1fa0b8e8754b38b518ae0238bffa5e95f71e8e4fb951d8dc8d2231c5d405f0739988e54f9fc228610114272f6682432c489fec01bd
SSDEEP 96:nPE0JBu0//javhWb3QWqMW/MK7+R3Is+fG:nMqu0/LavhE3QW/WEKiBnc
TLSH
T1F7F1E68369DB7932F04ADDB1B57A2FD1FC38F85192BA025A234CE1BC5A32B210483713
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

65536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Sharing