jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8.bin
Size 1.5MB
Sample260930-qll18a1dmf
SHA256 3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8
MD5 b89a290a41689e6c91794d4e9c8f346d
SHA1 842e4e6b25cdbba7d676cf02aae4a73e3f160ddd
SHA512 55c861fab8417ee85dce7bb6d1124f0f69979e9841036bd43866d2efec05e6b1caa2433797504ccdbfea9365d895523705156e61dac91147cdb8474403169b94
SSDEEP 24576:6ctFO431U0XwvjN/v8a6r3ugETwq16n0Bgx7bc46dHXGQcdo6z2gd3AgMclN:6V4FU0XeGhETwI6rpFoH2QC2gdQgFN
TLSH
T1C76533081EF4FAF6F2BF56719C82808CD51ABA70863A0403611E973767F3A85D896777
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8.bin

File Explorer

jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8.bin

.exe 1.5MB

jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8.bin

IMPHASH 5ef1a99ad0fb8258c83f3b2d119aea21
SHA256 3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8
MD5 b89a290a41689e6c91794d4e9c8f346d
SHA1 842e4e6b25cdbba7d676cf02aae4a73e3f160ddd
SHA512 55c861fab8417ee85dce7bb6d1124f0f69979e9841036bd43866d2efec05e6b1caa2433797504ccdbfea9365d895523705156e61dac91147cdb8474403169b94
SSDEEP 24576:6ctFO431U0XwvjN/v8a6r3ugETwq16n0Bgx7bc46dHXGQcdo6z2gd3AgMclN:6V4FU0XeGhETwI6rpFoH2QC2gdQgFN
TLSH
T1C76533081EF4FAF6F2BF56719C82808CD51ABA70863A0403611E973767F3A85D896777
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

crtdll

raise iswgraph _mbsnbcpy _mbclen _finite rand _exit

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

rpcrt4

short_from_ndr float_from_ndr float_array_from_ndr enum_from_ndr data_into_ndr RpcTestCancel RpcStringBindingParseA RpcSsSetClientAllocFree RpcSsEnableAllocate RpcSsDestroyClientContext RpcSsAllocate RpcSmSetThreadHandle RpcSmSetClientAllocFree RpcSmFree RpcServerUseAllProtseqsIfEx RpcServerRegisterIfEx RpcRaiseException RpcObjectInqType RpcMgmtWaitServerListen RpcMgmtSetCancelTimeout RpcMgmtInqStats RpcMgmtEpEltInqNextA RpcBindingSetObject MesDecodeIncrementalHandleCreate MesDecodeBufferHandleCreate DceErrorInqTextA CStdStubBuffer_CountRefs tree_peek_ndr

ntdll

NtQuerySystemInformation wcslen NtCreateEvent NtCreateSection NtCreateSymbolicLinkObject NtOpenThread NtOpenThreadToken NtQueryDefaultLocale NtQueryInformationProcess NtQueryInstallUILanguage NtSetInformationObject NtUnmapViewOfSection NtWriteVirtualMemory RtlAnsiStringToUnicodeString RtlAppendUnicodeStringToString RtlCreateTagHeap RtlFreeSid RtlLeaveCriticalSection RtlNtStatusToDosError RtlQueryRegistryValues

kernel32

EnumResourceTypesA ExitProcess FreeResource GetACP GetCommandLineA GetDateFormatA GetLocalTime lstrlenA lstrcmpiA lstrcmpA lstrcatA WriteFile VirtualFree VirtualAlloc UnmapViewOfFile TlsSetValue TlsAlloc Sleep SetUnhandledExceptionFilter SetLastError SetEndOfFile SetCurrentDirectoryA ReadFile OpenFile LocalAlloc HeapAlloc GetStartupInfoA GetOEMCP GetModuleHandleA EnterCriticalSection