jaffacakes118_b0b5aa87351d14dde5ce33d994a979ff8888cb3bc49cdbe68b1968b4eff7af65[.]bin

General

Target
jaffacakes118_b0b5aa87351d14dde5ce33d994a979ff8888cb3bc49cdbe68b1968b4eff7af65.bin
Size 201KB
Sample260930-ljhtkatv9k
SHA256 b0b5aa87351d14dde5ce33d994a979ff8888cb3bc49cdbe68b1968b4eff7af65
MD5 0e79e671b8f6aa02608ed6d1718d17a0
SHA1 27d40614b90285ff5e53e1c743f80093b15c4dc9
SHA512 cb59e460a695789126b88840fce5c6691d1ce28893e89e407d0b1f6088f07cb3b111aac31349cd3a1663227450185b55608f6ebd16a878860a6c7d688ff9f6ee
SSDEEP 3072:xBcX0oxg622Z0P+13GoxB3oIb7IWNowLGz2yMIRIMsqyTC+hwLWaVPuAcNHLH:HcWdPOrBvpaz2y/Rdsq2C1y
TLSH
T197145D3AE1C18937D0B61E7CCD9672E5B51EFE202D3C144F75E80E4C993A2926A293C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_b0b5aa87351d14dde5ce33d994a979ff8888cb3bc49cdbe68b1968b4eff7af65.bin

File Explorer

jaffacakes118_b0b5aa87351d14dde5ce33d994a979ff8888cb3bc49cdbe68b1968b4eff7af65.bin

.dll 201KB

jaffacakes118_b0b5aa87351d14dde5ce33d994a979ff8888cb3bc49cdbe68b1968b4eff7af65.bin

SHA256 b0b5aa87351d14dde5ce33d994a979ff8888cb3bc49cdbe68b1968b4eff7af65
MD5 0e79e671b8f6aa02608ed6d1718d17a0
SHA1 27d40614b90285ff5e53e1c743f80093b15c4dc9
SHA512 cb59e460a695789126b88840fce5c6691d1ce28893e89e407d0b1f6088f07cb3b111aac31349cd3a1663227450185b55608f6ebd16a878860a6c7d688ff9f6ee
SSDEEP 3072:xBcX0oxg622Z0P+13GoxB3oIb7IWNowLGz2yMIRIMsqyTC+hwLWaVPuAcNHLH:HcWdPOrBvpaz2y/Rdsq2C1y
TLSH
T197145D3AE1C18937D0B61E7CCD9672E5B51EFE202D3C144F75E80E4C993A2926A293C7
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

178420

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

170KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_b0b5aa87351d14dde5ce33d994a979ff8888cb3bc49cdbe68b1968b4eff7af65.bin

generic