jaffacakes118_f7a394a724952a0253bc67df82b0adb27c5b097569c1869e42f665565cc9c710[.]bin

General

Target
jaffacakes118_f7a394a724952a0253bc67df82b0adb27c5b097569c1869e42f665565cc9c710.bin
Size 1.1MB
Sample260930-pybwcaws2n
SHA256 f7a394a724952a0253bc67df82b0adb27c5b097569c1869e42f665565cc9c710
MD5 94ff3a5ce7332484c84dd9531ebc4f7c
SHA1 9a7e313fa6b151a8a1d5c933326e54be0d5ea04e
SHA512 40bb2826fd8b3e63e40f512464bcd3e566ad0a58e985b9bd9d956e49bb540a3c4b3140dd3614ab6625f248afb0fca3e63f5ed9e208c35dc9e5d80878e095900b
SSDEEP 12288:j/pZ0Gl0YQpSRWuGIvAvdcUT/EfBbaYN9E8ljg94:d2AQpWWuvA1pURN9
TLSH
T12835BA788CAB163BF3A7C5B1DBD581ABF1B0B1723E042861A4E206575B63947E183D3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_f7a394a724952a0253bc67df82b0adb27c5b097569c1869e42f665565cc9c710.bin

File Explorer

jaffacakes118_f7a394a724952a0253bc67df82b0adb27c5b097569c1869e42f665565cc9c710.bin

.dll 1.1MB

jaffacakes118_f7a394a724952a0253bc67df82b0adb27c5b097569c1869e42f665565cc9c710.bin

SHA256 f7a394a724952a0253bc67df82b0adb27c5b097569c1869e42f665565cc9c710
MD5 94ff3a5ce7332484c84dd9531ebc4f7c
SHA1 9a7e313fa6b151a8a1d5c933326e54be0d5ea04e
SHA512 40bb2826fd8b3e63e40f512464bcd3e566ad0a58e985b9bd9d956e49bb540a3c4b3140dd3614ab6625f248afb0fca3e63f5ed9e208c35dc9e5d80878e095900b
SSDEEP 12288:j/pZ0Gl0YQpSRWuGIvAvdcUT/EfBbaYN9E8ljg94:d2AQpWWuvA1pURN9
TLSH
T12835BA788CAB163BF3A7C5B1DBD581ABF1B0B1723E042861A4E206575B63947E183D3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

396972

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

384KB

Virtual Size

383KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

28KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

622B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

707KB

Virtual Size

707KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_f7a394a724952a0253bc67df82b0adb27c5b097569c1869e42f665565cc9c710.bin

generic