jaffacakes118_9bd01f082eed452208879e14a5fda8d707aab0495113ca0aa40669ba9178d97e[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_9bd01f082eed452208879e14a5fda8d707aab0495113ca0aa40669ba9178d97e.bin
Size 2.0MB
Sample260930-l14glacc29
SHA256 9bd01f082eed452208879e14a5fda8d707aab0495113ca0aa40669ba9178d97e
MD5 29630cdd161f5a8ef36a09368c2b3164
SHA1 e6c02045db941b0f24e56fa3186509c3cfd2f5b4
SHA512 0a1b445ff6c716cda4030bcd4ee98b36cc32944e4049f423b5fb9b6565894771b8b9c395cc54e4ea2839eb1e61cab0a68bf4e9125aee18110162d49c6ed952dc
SSDEEP 12288:BhKoUC9Flz2BQpSqWky0v81UikhrgQypSMzFhPbh4/2IStg:rUwl+6RrgLSuFpbYhStg
TLSH
T1C3A572323AD0A625C415217AA4152FE833ED3E52B791EDDFF22A7B990A704F0DD36643
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_9bd01f082eed452208879e14a5fda8d707aab0495113ca0aa40669ba9178d97e.bin

File Explorer

jaffacakes118_9bd01f082eed452208879e14a5fda8d707aab0495113ca0aa40669ba9178d97e.bin

.exe 2.0MB

jaffacakes118_9bd01f082eed452208879e14a5fda8d707aab0495113ca0aa40669ba9178d97e.bin

SHA256 9bd01f082eed452208879e14a5fda8d707aab0495113ca0aa40669ba9178d97e
MD5 29630cdd161f5a8ef36a09368c2b3164
SHA1 e6c02045db941b0f24e56fa3186509c3cfd2f5b4
SHA512 0a1b445ff6c716cda4030bcd4ee98b36cc32944e4049f423b5fb9b6565894771b8b9c395cc54e4ea2839eb1e61cab0a68bf4e9125aee18110162d49c6ed952dc
SSDEEP 12288:BhKoUC9Flz2BQpSqWky0v81UikhrgQypSMzFhPbh4/2IStg:rUwl+6RrgLSuFpbYhStg
TLSH
T1C3A572323AD0A625C415217AA4152FE833ED3E52B791EDDFF22A7B990A704F0DD36643
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

517180

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

501KB

Virtual Size

501KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_9bd01f082eed452208879e14a5fda8d707aab0495113ca0aa40669ba9178d97e.bin

generic