jaffacakes118_ef2c865e11c3df1a1eb99ba96f7f76d108f897a5a06e15c9f883404dd1c6f318[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_ef2c865e11c3df1a1eb99ba96f7f76d108f897a5a06e15c9f883404dd1c6f318.bin
Size 24.8MB
Sample260930-menppawzbw
SHA256 ef2c865e11c3df1a1eb99ba96f7f76d108f897a5a06e15c9f883404dd1c6f318
MD5 a976ac9e175e0969ea592249642ffcd9
SHA1 b3c0e49394d6acbc29176df386a50d811218bb25
SHA512 8af31c6c4e325ec5e10929a6f74abda26c3403b3b33b3e2dbe0bdd32f78267f1129e10f3b558fea266117c9c5a37269644f5938df5731dfaff02069eebef2055
SSDEEP 49152:ErTrEEGSoHgfhUfKITnUkcNVuV9zwuFsdgPGRf0X28Ig5d8IP3Y48IjK451h/eoC:UTfhSux0/I3IgI+451h/5SIQZMI
TLSH
T11E4763F0184084EFE2218BFFDB5BBA94F5563C425916518618E2FDBB0A3C554A832EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_ef2c865e11c3df1a1eb99ba96f7f76d108f897a5a06e15c9f883404dd1c6f318.bin

File Explorer

jaffacakes118_ef2c865e11c3df1a1eb99ba96f7f76d108f897a5a06e15c9f883404dd1c6f318.bin

.exe 24.8MB

jaffacakes118_ef2c865e11c3df1a1eb99ba96f7f76d108f897a5a06e15c9f883404dd1c6f318.bin

SHA256 ef2c865e11c3df1a1eb99ba96f7f76d108f897a5a06e15c9f883404dd1c6f318
MD5 a976ac9e175e0969ea592249642ffcd9
SHA1 b3c0e49394d6acbc29176df386a50d811218bb25
SHA512 8af31c6c4e325ec5e10929a6f74abda26c3403b3b33b3e2dbe0bdd32f78267f1129e10f3b558fea266117c9c5a37269644f5938df5731dfaff02069eebef2055
SSDEEP 49152:ErTrEEGSoHgfhUfKITnUkcNVuV9zwuFsdgPGRf0X28Ig5d8IP3Y48IjK451h/eoC:UTfhSux0/I3IgI+451h/5SIQZMI
TLSH
T11E4763F0184084EFE2218BFFDB5BBA94F5563C425916518618E2FDBB0A3C554A832EFD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1631384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

137KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

23.1MB

Virtual Size

23.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_ef2c865e11c3df1a1eb99ba96f7f76d108f897a5a06e15c9f883404dd1c6f318.bin

generic