jaffacakes118_a9245cbd1d4017b521a7f1a576092eea22234bd49f1ae4be861e761d258e6581[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_a9245cbd1d4017b521a7f1a576092eea22234bd49f1ae4be861e761d258e6581.bin
Size 27.5MB
Sample260930-nlcfns1vgx
SHA256 a9245cbd1d4017b521a7f1a576092eea22234bd49f1ae4be861e761d258e6581
MD5 0065bdfb91ac526e70b60fb3819e9ff2
SHA1 f10228266f8a9833aaeeb9795e0f078a624e75d1
SHA512 554f9c338b4bfdb5ac99720273a8464c7dd19f5b04916ac064b22d734aff6ae5f420b816c67c96c04d1e10061bd22e31fb3c2d8dde482c144b1d0be2444a122d
SSDEEP 98304:gdtk+x9it7chCP1UYUYrY7+7n1BbZeRxRmcIq/UlZd7iz:F7N/rY67n1BbZ/Zd7
TLSH
T1CC57E815B9987D15D0AB087AAA3EBC4CC49BBF140719884F5DA77B3B27F2244703AC5E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_a9245cbd1d4017b521a7f1a576092eea22234bd49f1ae4be861e761d258e6581.bin

File Explorer

jaffacakes118_a9245cbd1d4017b521a7f1a576092eea22234bd49f1ae4be861e761d258e6581.bin

.exe 27.5MB

jaffacakes118_a9245cbd1d4017b521a7f1a576092eea22234bd49f1ae4be861e761d258e6581.bin

SHA256 a9245cbd1d4017b521a7f1a576092eea22234bd49f1ae4be861e761d258e6581
MD5 0065bdfb91ac526e70b60fb3819e9ff2
SHA1 f10228266f8a9833aaeeb9795e0f078a624e75d1
SHA512 554f9c338b4bfdb5ac99720273a8464c7dd19f5b04916ac064b22d734aff6ae5f420b816c67c96c04d1e10061bd22e31fb3c2d8dde482c144b1d0be2444a122d
SSDEEP 98304:gdtk+x9it7chCP1UYUYrY7+7n1BbZeRxRmcIq/UlZd7iz:F7N/rY67n1BbZ/Zd7
TLSH
T1CC57E815B9987D15D0AB087AAA3EBC4CC49BBF140719884F5DA77B3B27F2244703AC5E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4155364

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

3.9MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

26KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

934B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

76B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

323KB

Virtual Size

322KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

23.2MB

Virtual Size

23.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_a9245cbd1d4017b521a7f1a576092eea22234bd49f1ae4be861e761d258e6581.bin

generic