jaffacakes118_8a36a97994e58f28aca8f43be58e3dd825b3fb6b8ee4358e639226ad777a62ad[.]bin

General

Target
jaffacakes118_8a36a97994e58f28aca8f43be58e3dd825b3fb6b8ee4358e639226ad777a62ad.bin
Size 73KB
Sample260930-mwh6jaywet
SHA256 8a36a97994e58f28aca8f43be58e3dd825b3fb6b8ee4358e639226ad777a62ad
MD5 7f44914dc66bc2e29457a3bec3d6635e
SHA1 f41ae79e9e5da2ef8d38846b70c2754aebf781a5
SHA512 921aee148e0e21e97ca91f20deb8a5fee1dbbb55c1beb01990275b8dba122cc3f6688aea5d3a8ccf3c3299e17741c02d96e19c25a412fb501c35941154f200fa
SSDEEP 1536:mMJbf/Y7I6sRkpVPSbz5tRr4//FSz1GqlMHAdVbSfm5jpJm:LJ1AFSbzjy/dSRGqeA3Se5
TLSH
T16473D041B3E84066F17BBD7C2E9247602A3D7E042F37CA4B76C0174F4D696A40A6BB96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_8a36a97994e58f28aca8f43be58e3dd825b3fb6b8ee4358e639226ad777a62ad.bin

File Explorer

jaffacakes118_8a36a97994e58f28aca8f43be58e3dd825b3fb6b8ee4358e639226ad777a62ad.bin

.dll 73KB

jaffacakes118_8a36a97994e58f28aca8f43be58e3dd825b3fb6b8ee4358e639226ad777a62ad.bin

SHA256 8a36a97994e58f28aca8f43be58e3dd825b3fb6b8ee4358e639226ad777a62ad
MD5 7f44914dc66bc2e29457a3bec3d6635e
SHA1 f41ae79e9e5da2ef8d38846b70c2754aebf781a5
SHA512 921aee148e0e21e97ca91f20deb8a5fee1dbbb55c1beb01990275b8dba122cc3f6688aea5d3a8ccf3c3299e17741c02d96e19c25a412fb501c35941154f200fa
SSDEEP 1536:mMJbf/Y7I6sRkpVPSbz5tRr4//FSz1GqlMHAdVbSfm5jpJm:LJ1AFSbzjy/dSRGqeA3Se5
TLSH
T16473D041B3E84066F17BBD7C2E9247602A3D7E042F37CA4B76C0174F4D696A40A6BB96
MD5 SHA1 SHA512 SSDEEP TLSH

windows:7 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

7

Entry point

62749

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.arch

Size

1024B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idat_0

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_8a36a97994e58f28aca8f43be58e3dd825b3fb6b8ee4358e639226ad777a62ad.bin

generic