jaffacakes118_16f715696b632eb554484b61252b31a9d74ff4a82c595919b33aa2421f290082[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_16f715696b632eb554484b61252b31a9d74ff4a82c595919b33aa2421f290082.bin
Size 123KB
Sample261002-krpfmsec83
SHA256 16f715696b632eb554484b61252b31a9d74ff4a82c595919b33aa2421f290082
MD5 73052fbcf8c88c6d6173580360f779a1
SHA1 3114a867dbfd3c9431fb292076f2b7e0e5ac13e2
SHA512 8e09794ca533638a425f55f52efe1a7b6b3298e223cf4c0d5e3dbe892d66ee39cce1a42c491b26f4edab5ce58b42f491e241698762fea22f7f556a5c116da019
SSDEEP 768:MYs61q9NLNQWSp+812UNphLJX8OOJB8Re:MYD1q9NBQWSpP24/Voh
TLSH
T165C33A3FEA91C8F3D058157FA901D539793E3A3C19A900B0D7BBED4DACE629015B91D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_16f715696b632eb554484b61252b31a9d74ff4a82c595919b33aa2421f290082.bin

File Explorer

jaffacakes118_16f715696b632eb554484b61252b31a9d74ff4a82c595919b33aa2421f290082.bin

.exe 123KB

jaffacakes118_16f715696b632eb554484b61252b31a9d74ff4a82c595919b33aa2421f290082.bin

SHA256 16f715696b632eb554484b61252b31a9d74ff4a82c595919b33aa2421f290082
MD5 73052fbcf8c88c6d6173580360f779a1
SHA1 3114a867dbfd3c9431fb292076f2b7e0e5ac13e2
SHA512 8e09794ca533638a425f55f52efe1a7b6b3298e223cf4c0d5e3dbe892d66ee39cce1a42c491b26f4edab5ce58b42f491e241698762fea22f7f556a5c116da019
SSDEEP 768:MYs61q9NLNQWSp+812UNphLJX8OOJB8Re:MYD1q9NBQWSpP24/Voh
TLSH
T165C33A3FEA91C8F3D058157FA901D539793E3A3C19A900B0D7BBED4DACE629015B91D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21072

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

228B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_16f715696b632eb554484b61252b31a9d74ff4a82c595919b33aa2421f290082.bin

generic