jaffacakes118_13f7b553130b0cabe0525879fc7b77661a4f380651b1bfeef4f3200092797375[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_13f7b553130b0cabe0525879fc7b77661a4f380651b1bfeef4f3200092797375.bin
Size 30.1MB
Sample260930-mfv56axt3l
SHA256 13f7b553130b0cabe0525879fc7b77661a4f380651b1bfeef4f3200092797375
MD5 cfa55a4fb701ff2758f9f3c20ef734cc
SHA1 ce503a37bea9a91cbb6a7b656c8f9c918b801c20
SHA512 174cbfb02f0c6b893ca70b46c36cf35466126a1207e0d5d479f364a4be9b85c9ef02afb3901246097874040ffa51577e0a22e81fc2ba5643337807ddc572dc44
SSDEEP 98304:A4NvC5iR71NEQNlSe/Nl0M0TcefnvqgG2a4f/nqZWZl+Y:tKa7kWSell0M0gX4f/nqZWZQY
TLSH
T1A967532038A9E479E2036974FC1E7C3D114C6F54A74DB89F6C1BFB6867F22642428E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_13f7b553130b0cabe0525879fc7b77661a4f380651b1bfeef4f3200092797375.bin

File Explorer

jaffacakes118_13f7b553130b0cabe0525879fc7b77661a4f380651b1bfeef4f3200092797375.bin

.exe 30.1MB

jaffacakes118_13f7b553130b0cabe0525879fc7b77661a4f380651b1bfeef4f3200092797375.bin

SHA256 13f7b553130b0cabe0525879fc7b77661a4f380651b1bfeef4f3200092797375
MD5 cfa55a4fb701ff2758f9f3c20ef734cc
SHA1 ce503a37bea9a91cbb6a7b656c8f9c918b801c20
SHA512 174cbfb02f0c6b893ca70b46c36cf35466126a1207e0d5d479f364a4be9b85c9ef02afb3901246097874040ffa51577e0a22e81fc2ba5643337807ddc572dc44
SSDEEP 98304:A4NvC5iR71NEQNlSe/Nl0M0TcefnvqgG2a4f/nqZWZl+Y:tKa7kWSell0M0gX4f/nqZWZQY
TLSH
T1A967532038A9E479E2036974FC1E7C3D114C6F54A74DB89F6C1BFB6867F22642428E9D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1138432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

28.9MB

Virtual Size

28.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_13f7b553130b0cabe0525879fc7b77661a4f380651b1bfeef4f3200092797375.bin

generic