jaffacakes118_ca6708f58bbb66ddae7962d14e3350a60637f99e3487c4df1f8a31c1443ac3e5[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_ca6708f58bbb66ddae7962d14e3350a60637f99e3487c4df1f8a31c1443ac3e5.bin
Size 909KB
Sample260930-pgqyyavsfx
SHA256 ca6708f58bbb66ddae7962d14e3350a60637f99e3487c4df1f8a31c1443ac3e5
MD5 bd7d341d166e5c7cf26fa456bd5bf76e
SHA1 cfd3de9fddd8abc8044b080708da5a2a586644dc
SHA512 8a0a4fa0a461797bf41efce6bd00a039d70cde0552444a1c6d3011112a931857502808198fbf0733f79a70927da9a0a68c5aea49a4bc549270e972b0961c1708
SSDEEP 24576:q9Vlq9m08OMNPjQqr4aJVggeMMyphkUvTrMMWi00Sz/7sx:aV0khOMZUqrodobvTrMMWkWzs
TLSH
T1BF158E22F2D09433D1732B388D1B8698A935BE253E289C467BF55E0C5F79A817E253C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_ca6708f58bbb66ddae7962d14e3350a60637f99e3487c4df1f8a31c1443ac3e5.bin

File Explorer

jaffacakes118_ca6708f58bbb66ddae7962d14e3350a60637f99e3487c4df1f8a31c1443ac3e5.bin

.exe 909KB

jaffacakes118_ca6708f58bbb66ddae7962d14e3350a60637f99e3487c4df1f8a31c1443ac3e5.bin

SHA256 ca6708f58bbb66ddae7962d14e3350a60637f99e3487c4df1f8a31c1443ac3e5
MD5 bd7d341d166e5c7cf26fa456bd5bf76e
SHA1 cfd3de9fddd8abc8044b080708da5a2a586644dc
SHA512 8a0a4fa0a461797bf41efce6bd00a039d70cde0552444a1c6d3011112a931857502808198fbf0733f79a70927da9a0a68c5aea49a4bc549270e972b0961c1708
SSDEEP 24576:q9Vlq9m08OMNPjQqr4aJVggeMMyphkUvTrMMWi00Sz/7sx:aV0khOMZUqrodobvTrMMWkWzs
TLSH
T1BF158E22F2D09433D1732B388D1B8698A935BE253E289C467BF55E0C5F79A817E253C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

671792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

653KB

Virtual Size

653KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

14KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

181KB

Virtual Size

181KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_ca6708f58bbb66ddae7962d14e3350a60637f99e3487c4df1f8a31c1443ac3e5.bin

generic