jaffacakes118_e28c17fd2977883ed3f7043b35c4964f60ca50da4eacc61cf8ee697091fb1286[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_e28c17fd2977883ed3f7043b35c4964f60ca50da4eacc61cf8ee697091fb1286.bin
Size 2.6MB
Sample260930-pkgvfavwdt
SHA256 e28c17fd2977883ed3f7043b35c4964f60ca50da4eacc61cf8ee697091fb1286
MD5 cc1f2a733fa2dfa033d57c561fbc51c6
SHA1 76e98787cecd0ed07226b8a98045564448d8f882
SHA512 495e057d84089d7c5247b0a1a1e05744cec95409ce8bd8bee12227fa05e8b960642ea99c8495fe03c90f44b72ed132b334ebd99071893b20c78e48afa4b2a6de
SSDEEP 24576:GTSPbBVw1ssndJHXyugfKNBmuQBGS1UluHq+EjE6UrQoaQRDlJIgIGM+nS+sApZQ:GYSNdZcuQAS1eETIL+nDMPgHp
TLSH
T1B2C54C137284907ED0671F374C6BC995643B7E607F159E5BBFA80E0C0E39A42FD2AA52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_e28c17fd2977883ed3f7043b35c4964f60ca50da4eacc61cf8ee697091fb1286.bin

File Explorer

jaffacakes118_e28c17fd2977883ed3f7043b35c4964f60ca50da4eacc61cf8ee697091fb1286.bin

.exe 2.6MB

jaffacakes118_e28c17fd2977883ed3f7043b35c4964f60ca50da4eacc61cf8ee697091fb1286.bin

SHA256 e28c17fd2977883ed3f7043b35c4964f60ca50da4eacc61cf8ee697091fb1286
MD5 cc1f2a733fa2dfa033d57c561fbc51c6
SHA1 76e98787cecd0ed07226b8a98045564448d8f882
SHA512 495e057d84089d7c5247b0a1a1e05744cec95409ce8bd8bee12227fa05e8b960642ea99c8495fe03c90f44b72ed132b334ebd99071893b20c78e48afa4b2a6de
SSDEEP 24576:GTSPbBVw1ssndJHXyugfKNBmuQBGS1UluHq+EjE6UrQoaQRDlJIgIGM+nS+sApZQ:GYSNdZcuQAS1eETIL+nDMPgHp
TLSH
T1B2C54C137284907ED0671F374C6BC995643B7E607F159E5BBFA80E0C0E39A42FD2AA52
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2191004

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

21KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

64B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

182KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

252KB

Virtual Size

252KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_e28c17fd2977883ed3f7043b35c4964f60ca50da4eacc61cf8ee697091fb1286.bin

generic