jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.bin
Size 1.6MB
Sample260930-lccc7ssze1
SHA256 3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876
MD5 67c27c6e4107b36f43df6bcef1434631
SHA1 0625ac804139878c78bb808acc67b11ec5dd9205
SHA512 8a325a4f4b06fc3938c577290f6b05b37eae83a8d265d35c782e12eb5ad5f9f3f45625658b10b57e7034d7536892450b360c186ce9820da16238273767d322c5
SSDEEP 24576:BKxSXVPFXy0enhsyIdpj9N6ABNSNxPjAin1gJOYXvNw5Hy56h4qCuYTJ:qIFtzvXSZgJHXvkHjFETJ
TLSH
T145755B13B295103BD0772B37582BD2945D3BBA203A6AADCB6FF40D0D0F7D641293E696
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.bin

File Explorer

jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.bin

.exe 1.6MB

jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.bin

SHA256 3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876
MD5 67c27c6e4107b36f43df6bcef1434631
SHA1 0625ac804139878c78bb808acc67b11ec5dd9205
SHA512 8a325a4f4b06fc3938c577290f6b05b37eae83a8d265d35c782e12eb5ad5f9f3f45625658b10b57e7034d7536892450b360c186ce9820da16238273767d322c5
SSDEEP 24576:BKxSXVPFXy0enhsyIdpj9N6ABNSNxPjAin1gJOYXvNw5Hy56h4qCuYTJ:qIFtzvXSZgJHXvkHjFETJ
TLSH
T145755B13B295103BD0772B37582BD2945D3BBA203A6AADCB6FF40D0D0F7D641293E696
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1392704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

22KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

116KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.bin

generic