jaffacakes118_0cf283c79a51df069059f5b75c64d7f2108f890762d2c998ecfc90742218b39d[.]bin

General

Target
jaffacakes118_0cf283c79a51df069059f5b75c64d7f2108f890762d2c998ecfc90742218b39d.bin
Size 201KB
Sample260930-mm2lhscf73
SHA256 0cf283c79a51df069059f5b75c64d7f2108f890762d2c998ecfc90742218b39d
MD5 8b00047e2dde62b918a618087e266342
SHA1 5b37b0c8d83a62ac2ed86b8baf2b4ff4390a004c
SHA512 efce2b17d3cabef2b9b97182ce96139beaeb8318fc679a4791ffc23f0c1a410b06adacb6e1b1f52524671872fe46928b93013b6b62806770e781d057db811a78
SSDEEP 3072:jJZQQJv4ljtC0aCZaPjjkFE7fsitQWeyjrfDRDEwbgtR65GWTUea7CNgELH:NZ6JC058jjjp/bRDXgtRuTA
TLSH
T185146D36F1D08937D0B61E7CCE97A2E5755ABF602D3C150F79E80E4C8A3A2D269193C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_0cf283c79a51df069059f5b75c64d7f2108f890762d2c998ecfc90742218b39d.bin

File Explorer

jaffacakes118_0cf283c79a51df069059f5b75c64d7f2108f890762d2c998ecfc90742218b39d.bin

.dll 201KB

jaffacakes118_0cf283c79a51df069059f5b75c64d7f2108f890762d2c998ecfc90742218b39d.bin

SHA256 0cf283c79a51df069059f5b75c64d7f2108f890762d2c998ecfc90742218b39d
MD5 8b00047e2dde62b918a618087e266342
SHA1 5b37b0c8d83a62ac2ed86b8baf2b4ff4390a004c
SHA512 efce2b17d3cabef2b9b97182ce96139beaeb8318fc679a4791ffc23f0c1a410b06adacb6e1b1f52524671872fe46928b93013b6b62806770e781d057db811a78
SSDEEP 3072:jJZQQJv4ljtC0aCZaPjjkFE7fsitQWeyjrfDRDEwbgtR65GWTUea7CNgELH:NZ6JC058jjjp/bRDXgtRuTA
TLSH
T185146D36F1D08937D0B61E7CCE97A2E5755ABF602D3C150F79E80E4C8A3A2D269193C2
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

178356

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

170KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_0cf283c79a51df069059f5b75c64d7f2108f890762d2c998ecfc90742218b39d.bin

generic