jaffacakes118_f851656a1ffc6be5013343547f1b324ffd88b4af67f487cd5f693c48f649ad3c[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_f851656a1ffc6be5013343547f1b324ffd88b4af67f487cd5f693c48f649ad3c.bin
Size 301KB
Sample260930-lyf9aavway
SHA256 f851656a1ffc6be5013343547f1b324ffd88b4af67f487cd5f693c48f649ad3c
MD5 7619c20a109019c147c3fd441c3a9b35
SHA1 f8286f8cef0f2a91d4323bff037f0247031ec841
SHA512 96e3cfc3b1a96b2d412f6801eb5070ff5b5fbb5500848b28d14876545074d7f048ae3319cccf180bca63f0b26d129da5c7f5bc365c0e3cc561315e65725419c0
SSDEEP 6144:A1G6EFyaPQhwKLznoAz56BiYRR5kqC9tm1MlHq7eeNz:0fEMBhwKHnoACRxC9oz
TLSH
T1B564CF22B80ED062E44F12F8D7A24CFF3130AEE8D9980D2B5595BC99F5732D1653B8B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_f851656a1ffc6be5013343547f1b324ffd88b4af67f487cd5f693c48f649ad3c.bin

File Explorer

jaffacakes118_f851656a1ffc6be5013343547f1b324ffd88b4af67f487cd5f693c48f649ad3c.bin

.exe 301KB

jaffacakes118_f851656a1ffc6be5013343547f1b324ffd88b4af67f487cd5f693c48f649ad3c.bin

SHA256 f851656a1ffc6be5013343547f1b324ffd88b4af67f487cd5f693c48f649ad3c
MD5 7619c20a109019c147c3fd441c3a9b35
SHA1 f8286f8cef0f2a91d4323bff037f0247031ec841
SHA512 96e3cfc3b1a96b2d412f6801eb5070ff5b5fbb5500848b28d14876545074d7f048ae3319cccf180bca63f0b26d129da5c7f5bc365c0e3cc561315e65725419c0
SSDEEP 6144:A1G6EFyaPQhwKLznoAz56BiYRR5kqC9tm1MlHq7eeNz:0fEMBhwKHnoACRxC9oz
TLSH
T1B564CF22B80ED062E44F12F8D7A24CFF3130AEE8D9980D2B5595BC99F5732D1653B8B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:8 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

92592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

74KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

138KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

71KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_f851656a1ffc6be5013343547f1b324ffd88b4af67f487cd5f693c48f649ad3c.bin

generic