jaffacakes118_109ba8617123cd22675641b3671b13c374eecd76ddbf8a76adffcfdf6bd37287[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_109ba8617123cd22675641b3671b13c374eecd76ddbf8a76adffcfdf6bd37287.bin
Size 800KB
Sample260930-mqma1ach45
SHA256 109ba8617123cd22675641b3671b13c374eecd76ddbf8a76adffcfdf6bd37287
MD5 076af75b0a6335509a07748295193ed8
SHA1 593deb69790b7312fe926e17d2b00714f7897976
SHA512 46947f6d1e0c5994f0c9225c97940e81e411946a498166b652c9c105050b1ac2ee8259ecb648a6be4c738e2476b3a1d631a8dd98d6f73d65a2ccf1169991c3e8
SSDEEP 12288:ebovXsnr2ogFnvVmQzrTcCoB+/85pZrzBOS+rBAjwBnlH888888888888W88888B:pPsnr2nmQzra+gXBOS+rBAEBl7
TLSH
T174053912A2911C3BC06F5635496782E5AC377AE12AD678C65FF4CD3C0F392B12C3E696
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_109ba8617123cd22675641b3671b13c374eecd76ddbf8a76adffcfdf6bd37287.bin

File Explorer

jaffacakes118_109ba8617123cd22675641b3671b13c374eecd76ddbf8a76adffcfdf6bd37287.bin

.exe 800KB

jaffacakes118_109ba8617123cd22675641b3671b13c374eecd76ddbf8a76adffcfdf6bd37287.bin

SHA256 109ba8617123cd22675641b3671b13c374eecd76ddbf8a76adffcfdf6bd37287
MD5 076af75b0a6335509a07748295193ed8
SHA1 593deb69790b7312fe926e17d2b00714f7897976
SHA512 46947f6d1e0c5994f0c9225c97940e81e411946a498166b652c9c105050b1ac2ee8259ecb648a6be4c738e2476b3a1d631a8dd98d6f73d65a2ccf1169991c3e8
SSDEEP 12288:ebovXsnr2ogFnvVmQzrTcCoB+/85pZrzBOS+rBAjwBnlH888888888888W88888B:pPsnr2nmQzra+gXBOS+rBAEBl7
TLSH
T174053912A2911C3BC06F5635496782E5AC377AE12AD678C65FF4CD3C0F392B12C3E696
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

687272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

663KB

Virtual Size

662KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

670B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_109ba8617123cd22675641b3671b13c374eecd76ddbf8a76adffcfdf6bd37287.bin

generic