jaffacakes118_0b067787ae1db22174462cbd20c2c6e719b5eac40d072be0ce725d2684bf5b64[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_0b067787ae1db22174462cbd20c2c6e719b5eac40d072be0ce725d2684bf5b64.bin
Size 1.1MB
Sample260930-qbf28azfpe
SHA256 0b067787ae1db22174462cbd20c2c6e719b5eac40d072be0ce725d2684bf5b64
MD5 ec368f151ecf18062061cf5219574914
SHA1 f5a6d0d633585a5caafaecd25290521a97f8969d
SHA512 0ed58c1fea430cc3f25f79b009f2cd56c6e4ca1312e42c4c7b7b2517fdcc3f01927b3bbfeeea8283daef4bf78772492e21078504de8c3c8a2680cbf722142b60
SSDEEP 24576:DxlzUr+j6kaRxUDpDY/MReTmOJA+PUMa0K20124Z49dkIRr4g:DLzva9S81a16nfJ4g
TLSH
T13B35AF22B6E1C437D5732A34CC1B92B96836BE006E38B9477BE93D0C9F3D64179252D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_0b067787ae1db22174462cbd20c2c6e719b5eac40d072be0ce725d2684bf5b64.bin

File Explorer

jaffacakes118_0b067787ae1db22174462cbd20c2c6e719b5eac40d072be0ce725d2684bf5b64.bin

.exe 1.1MB

jaffacakes118_0b067787ae1db22174462cbd20c2c6e719b5eac40d072be0ce725d2684bf5b64.bin

SHA256 0b067787ae1db22174462cbd20c2c6e719b5eac40d072be0ce725d2684bf5b64
MD5 ec368f151ecf18062061cf5219574914
SHA1 f5a6d0d633585a5caafaecd25290521a97f8969d
SHA512 0ed58c1fea430cc3f25f79b009f2cd56c6e4ca1312e42c4c7b7b2517fdcc3f01927b3bbfeeea8283daef4bf78772492e21078504de8c3c8a2680cbf722142b60
SSDEEP 24576:DxlzUr+j6kaRxUDpDY/MReTmOJA+PUMa0K20124Z49dkIRr4g:DLzva9S81a16nfJ4g
TLSH
T13B35AF22B6E1C437D5732A34CC1B92B96836BE006E38B9477BE93D0C9F3D64179252D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

621044

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

603KB

Virtual Size

602KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_0b067787ae1db22174462cbd20c2c6e719b5eac40d072be0ce725d2684bf5b64.bin

generic