jaffacakes118_4e7effcc18acdc34a0d4db91eacfa92b2a3e0c68969ff97597d23b6508fa9d29[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_4e7effcc18acdc34a0d4db91eacfa92b2a3e0c68969ff97597d23b6508fa9d29.bin
Size 1.4MB
Sample260930-ppxrfsxgrd
SHA256 4e7effcc18acdc34a0d4db91eacfa92b2a3e0c68969ff97597d23b6508fa9d29
MD5 71996503974997cdbe0fc5e97bbc69f4
SHA1 aeebc0ceb64a9dd8e8ac7da4c6614ef27a8b5b84
SHA512 861883210bf4f80a98181ec47a3d4f36eef97855eabc2e39e765fe552e3b489c72f3febd9efb09a2570216edff13afbdd0cee7a47323e01f10d1dc60ac337c2a
SSDEEP 24576:u5w8owNi1DfLB5QbtdQiOVPRrrCAMrLyXtz6v6rx8kaT0vM:0PiPRXCAMrL+t2vYSj
TLSH
T19E657C22B2D3C437E4B32BB48C5BD5D95426BE116E38A88F3AE45F0C5F39A513D25392
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_4e7effcc18acdc34a0d4db91eacfa92b2a3e0c68969ff97597d23b6508fa9d29.bin

File Explorer

jaffacakes118_4e7effcc18acdc34a0d4db91eacfa92b2a3e0c68969ff97597d23b6508fa9d29.bin

.exe 1.4MB

jaffacakes118_4e7effcc18acdc34a0d4db91eacfa92b2a3e0c68969ff97597d23b6508fa9d29.bin

SHA256 4e7effcc18acdc34a0d4db91eacfa92b2a3e0c68969ff97597d23b6508fa9d29
MD5 71996503974997cdbe0fc5e97bbc69f4
SHA1 aeebc0ceb64a9dd8e8ac7da4c6614ef27a8b5b84
SHA512 861883210bf4f80a98181ec47a3d4f36eef97855eabc2e39e765fe552e3b489c72f3febd9efb09a2570216edff13afbdd0cee7a47323e01f10d1dc60ac337c2a
SSDEEP 24576:u5w8owNi1DfLB5QbtdQiOVPRrrCAMrLyXtz6v6rx8kaT0vM:0PiPRXCAMrL+t2vYSj
TLSH
T19E657C22B2D3C437E4B32BB48C5BD5D95426BE116E38A88F3AE45F0C5F39A513D25392
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1045524

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

1009KB

Virtual Size

1009KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

52B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

244KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_4e7effcc18acdc34a0d4db91eacfa92b2a3e0c68969ff97597d23b6508fa9d29.bin

generic