jaffacakes118_f96aaa5be0647cd20c7accba070ff7ae67ef8ae74955199612bb8a2f4137b030[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_f96aaa5be0647cd20c7accba070ff7ae67ef8ae74955199612bb8a2f4137b030.bin
Size 2.6MB
Sample260930-ph937sty4p
SHA256 f96aaa5be0647cd20c7accba070ff7ae67ef8ae74955199612bb8a2f4137b030
MD5 cd8502c75440062c0fcdc5c69ddc7e29
SHA1 6d4b772650d4f237b0687652e81ff6656436819c
SHA512 fefbad604584dba16efca4ff9bc830c66872444e73f03c2cf741be1f4dadd853b8d153f9b4aa6a2e54beb801259a0f18b8acf1149ff19fc37ae133230b511d28
SSDEEP 24576:WSPIxlWFMcH9Zn3yuAPatR2OQBGSVEluTEjEakCxQQP8q/85+985vJWdt5PboHwd:SwtdJ8OQASVOEn5+eFJItxcHH5O
TLSH
T199C53C1272849076D0771A37CC6BC995643B7E602B159C9BFFA80F0D0E39A42FE2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_f96aaa5be0647cd20c7accba070ff7ae67ef8ae74955199612bb8a2f4137b030.bin

File Explorer

jaffacakes118_f96aaa5be0647cd20c7accba070ff7ae67ef8ae74955199612bb8a2f4137b030.bin

.exe 2.6MB

jaffacakes118_f96aaa5be0647cd20c7accba070ff7ae67ef8ae74955199612bb8a2f4137b030.bin

SHA256 f96aaa5be0647cd20c7accba070ff7ae67ef8ae74955199612bb8a2f4137b030
MD5 cd8502c75440062c0fcdc5c69ddc7e29
SHA1 6d4b772650d4f237b0687652e81ff6656436819c
SHA512 fefbad604584dba16efca4ff9bc830c66872444e73f03c2cf741be1f4dadd853b8d153f9b4aa6a2e54beb801259a0f18b8acf1149ff19fc37ae133230b511d28
SSDEEP 24576:WSPIxlWFMcH9Zn3yuAPatR2OQBGSVEluTEjEakCxQQP8q/85+985vJWdt5PboHwd:SwtdJ8OQASVOEn5+eFJItxcHH5O
TLSH
T199C53C1272849076D0771A37CC6BC995643B7E602B159C9BFFA80F0D0E39A42FE2A757
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2186908

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

64B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

182KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

252KB

Virtual Size

252KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_f96aaa5be0647cd20c7accba070ff7ae67ef8ae74955199612bb8a2f4137b030.bin

generic