jaffacakes118_0666bf504463414803af16552bed1208bd6832ec77083f9e2ac2843fe223b338[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_0666bf504463414803af16552bed1208bd6832ec77083f9e2ac2843fe223b338.bin
Size 730KB
Sample261002-jt4snsdb49
SHA256 0666bf504463414803af16552bed1208bd6832ec77083f9e2ac2843fe223b338
MD5 77007d02059eaf9b358e2d9ebd1b3bd9
SHA1 16d27bf7ede7f41cb1aae43231f2014771a8ea18
SHA512 b20de3899283f9ffe696b3c0cca86081db42b52907972673b6621577e577cd7d2e37d18078476d1162a9c34328bb8684991bd8f896b9ded3d81312bf9850474b
SSDEEP 12288:mqj5De7Ea4yxzrywisbPMhO0KgZaOiZ42EQm3OapTFX:Dtyxz+wiWhqAas3
TLSH
T186F46D22F2914837D1632A34DC1B92A5AC36BF117E29BA472BF81D0C5F7D68178353E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_0666bf504463414803af16552bed1208bd6832ec77083f9e2ac2843fe223b338.bin

File Explorer

jaffacakes118_0666bf504463414803af16552bed1208bd6832ec77083f9e2ac2843fe223b338.bin

.exe 730KB

jaffacakes118_0666bf504463414803af16552bed1208bd6832ec77083f9e2ac2843fe223b338.bin

SHA256 0666bf504463414803af16552bed1208bd6832ec77083f9e2ac2843fe223b338
MD5 77007d02059eaf9b358e2d9ebd1b3bd9
SHA1 16d27bf7ede7f41cb1aae43231f2014771a8ea18
SHA512 b20de3899283f9ffe696b3c0cca86081db42b52907972673b6621577e577cd7d2e37d18078476d1162a9c34328bb8684991bd8f896b9ded3d81312bf9850474b
SSDEEP 12288:mqj5De7Ea4yxzrywisbPMhO0KgZaOiZ42EQm3OapTFX:Dtyxz+wiWhqAas3
TLSH
T186F46D22F2914837D1632A34DC1B92A5AC36BF117E29BA472BF81D0C5F7D68178353E6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

621864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

603KB

Virtual Size

603KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

70B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_0666bf504463414803af16552bed1208bd6832ec77083f9e2ac2843fe223b338.bin

generic