jaffacakes118_35e105ca6414b7932dbb516f4ad4670987fb2e1575b2a23bbfe08fbc3fb43e7d[.]bin

General

Target
jaffacakes118_35e105ca6414b7932dbb516f4ad4670987fb2e1575b2a23bbfe08fbc3fb43e7d.bin
Size 200KB
Sample260930-mxa7ba1dka
SHA256 35e105ca6414b7932dbb516f4ad4670987fb2e1575b2a23bbfe08fbc3fb43e7d
MD5 c17e6fbb9965ec53f09533265138fb92
SHA1 478ea8ad2ae40982a40001edd6d5cf6a321fe5b5
SHA512 be1e2335c5a0b216c8da459f920ee428f41c0665fdece6d47529cbb85ae8fa74415a5d95d1b16666d21edcf442275a9a50ae204acca86aba021485cf363e2ab5
SSDEEP 3072:3JZpyO6pVqbNfR34t0v7jhPmZ3dtbW2XSMLK2PUyzG1ouo7HC8pGqr7/IFjsH:ZZSSNfRv7jh1eSMJPULo7iI/IF
TLSH
T1C2146C36E1C08933D0761E7CCE9AA2E5B51EBF202D3C150F79E91E4C99792D269293C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_35e105ca6414b7932dbb516f4ad4670987fb2e1575b2a23bbfe08fbc3fb43e7d.bin

File Explorer

jaffacakes118_35e105ca6414b7932dbb516f4ad4670987fb2e1575b2a23bbfe08fbc3fb43e7d.bin

.dll 200KB

jaffacakes118_35e105ca6414b7932dbb516f4ad4670987fb2e1575b2a23bbfe08fbc3fb43e7d.bin

SHA256 35e105ca6414b7932dbb516f4ad4670987fb2e1575b2a23bbfe08fbc3fb43e7d
MD5 c17e6fbb9965ec53f09533265138fb92
SHA1 478ea8ad2ae40982a40001edd6d5cf6a321fe5b5
SHA512 be1e2335c5a0b216c8da459f920ee428f41c0665fdece6d47529cbb85ae8fa74415a5d95d1b16666d21edcf442275a9a50ae204acca86aba021485cf363e2ab5
SSDEEP 3072:3JZpyO6pVqbNfR34t0v7jhPmZ3dtbW2XSMLK2PUyzG1ouo7HC8pGqr7/IFjsH:ZZSSNfRv7jh1eSMJPULo7iI/IF
TLSH
T1C2146C36E1C08933D0761E7CCE9AA2E5B51EBF202D3C150F79E91E4C99792D269293C7
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

177680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

170KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

163B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_35e105ca6414b7932dbb516f4ad4670987fb2e1575b2a23bbfe08fbc3fb43e7d.bin

generic