jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.bin
Size 608KB
Sample260930-lmfhlswhrb
SHA256 172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c
MD5 78fb15584f6473db1f6054fda2cb05cc
SHA1 6c94ddd3a7b704153ff42c6431de8d0fb9c7b687
SHA512 17f1c0d3fff6e66ed76f17cdb93a714173e15665b3f7a19e6e2103addb932d1d6f62b7652662cd36eec5ad5b4e6a2400eb3d8d842588cf7cc32d2bbe774198b9
SSDEEP 12288:Znbzs7sHNicWRnjoplZfIstMR97Q9U8KE9lr1bVMi6EXkiEL:Znbg7sHNihRilBI2MR97s3r1h1wh
TLSH
T186D4D021668B0C10F5B676F8E0D9F930136F3D9985D4F6B412B8326A13769D7EE184CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.bin

File Explorer

jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.bin

.exe 608KB

jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.bin

SHA256 172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c
MD5 78fb15584f6473db1f6054fda2cb05cc
SHA1 6c94ddd3a7b704153ff42c6431de8d0fb9c7b687
SHA512 17f1c0d3fff6e66ed76f17cdb93a714173e15665b3f7a19e6e2103addb932d1d6f62b7652662cd36eec5ad5b4e6a2400eb3d8d842588cf7cc32d2bbe774198b9
SSDEEP 12288:Znbzs7sHNicWRnjoplZfIstMR97Q9U8KE9lr1bVMi6EXkiEL:Znbg7sHNihRilBI2MR97s3r1h1wh
TLSH
T186D4D021668B0C10F5B676F8E0D9F930136F3D9985D4F6B412B8326A13769D7EE184CE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

531020

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

515KB

Virtual Size

515KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

1012B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

85KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.bin

generic