jaffacakes118_76e82730559c0865287531d5b9018be19761c7e6a56b7f64a7752b5723e04cdd[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_76e82730559c0865287531d5b9018be19761c7e6a56b7f64a7752b5723e04cdd.bin
Size 853KB
Sample260930-l35gnsyclf
SHA256 76e82730559c0865287531d5b9018be19761c7e6a56b7f64a7752b5723e04cdd
MD5 525a88843e925a0cddbe3f710076bcbf
SHA1 d91a85f8e6a3103ebbdd50cf42015cd669916816
SHA512 4d085b0c67487f668b29775b06821f08b5ff43c627ee77a64286971eecbac0abb5c994d5028c33e26b219b1475fe313e31a316eb0e662018c4802d071e5d3a85
SSDEEP 24576:HcJ45PbBzsc9jNf5oKNeSnppWuE6oaU+MAwS:HPD5scJ5ldnW0TUHA
TLSH
T1CA0523F88C35F664D1E7497297EB3AA0C06F8F1C089462E6529BBDDB7876DC5804F812
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_76e82730559c0865287531d5b9018be19761c7e6a56b7f64a7752b5723e04cdd.bin

File Explorer

jaffacakes118_76e82730559c0865287531d5b9018be19761c7e6a56b7f64a7752b5723e04cdd.bin

.exe 853KB

jaffacakes118_76e82730559c0865287531d5b9018be19761c7e6a56b7f64a7752b5723e04cdd.bin

IMPHASH 9c8decf3582072f6edfc385a689f44f4
SHA256 76e82730559c0865287531d5b9018be19761c7e6a56b7f64a7752b5723e04cdd
MD5 525a88843e925a0cddbe3f710076bcbf
SHA1 d91a85f8e6a3103ebbdd50cf42015cd669916816
SHA512 4d085b0c67487f668b29775b06821f08b5ff43c627ee77a64286971eecbac0abb5c994d5028c33e26b219b1475fe313e31a316eb0e662018c4802d071e5d3a85
SSDEEP 24576:HcJ45PbBzsc9jNf5oKNeSnppWuE6oaU+MAwS:HPD5scJ5ldnW0TUHA
TLSH
T1CA0523F88C35F664D1E7497297EB3AA0C06F8F1C089462E6529BBDDB7876DC5804F812
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1134592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

196KB

Virtual Size

421KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

68KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pebundle

Size

323KB

Virtual Size

324KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pebundle

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pebundle

Size

128KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pebundle

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pebundle

Size

61KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

pebundle

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

jaffacakes118_76e82730559c0865287531d5b9018be19761c7e6a56b7f64a7752b5723e04cdd.bin

kernel32

generic