jaffacakes118_f2917f3ee744cefe338616ff8d890d486b3968b530beee55687fe2b02f07081b[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_f2917f3ee744cefe338616ff8d890d486b3968b530beee55687fe2b02f07081b.bin
Size 100KB
Sample261002-krss3atxds
SHA256 f2917f3ee744cefe338616ff8d890d486b3968b530beee55687fe2b02f07081b
MD5 c5bfeb7ee48b25fa1c628b89ec196fc8
SHA1 d78d9b791964f655f7fcd54bc8f9abb66e4d4cc8
SHA512 3ecf4a0495d59bb3c8df398c14b35d13e7fd241aa0d31c160100ecc788d586a3ac75e01ed10d1c09f37f04f995b9d76f48cceae8dd9d3a39046d3613282484b8
SSDEEP 1536:haBqHQcurPTf3J9hBzb0mv8iMKZFYSLJ5C7ZPNER517WLQS2wWEY/YRSsI:lBG737zIm0wFYQ5eW717WLQxwsFsI
TLSH
T15DA35B61B2F38876D2B27E784E1BAE18587EBF613D68945977F81E0E4D382D4201D393
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_f2917f3ee744cefe338616ff8d890d486b3968b530beee55687fe2b02f07081b.bin

File Explorer

jaffacakes118_f2917f3ee744cefe338616ff8d890d486b3968b530beee55687fe2b02f07081b.bin

.exe 100KB

jaffacakes118_f2917f3ee744cefe338616ff8d890d486b3968b530beee55687fe2b02f07081b.bin

SHA256 f2917f3ee744cefe338616ff8d890d486b3968b530beee55687fe2b02f07081b
MD5 c5bfeb7ee48b25fa1c628b89ec196fc8
SHA1 d78d9b791964f655f7fcd54bc8f9abb66e4d4cc8
SHA512 3ecf4a0495d59bb3c8df398c14b35d13e7fd241aa0d31c160100ecc788d586a3ac75e01ed10d1c09f37f04f995b9d76f48cceae8dd9d3a39046d3613282484b8
SSDEEP 1536:haBqHQcurPTf3J9hBzb0mv8iMKZFYSLJ5C7ZPNER517WLQS2wWEY/YRSsI:lBG737zIm0wFYQ5eW717WLQxwsFsI
TLSH
T15DA35B61B2F38876D2B27E784E1BAE18587EBF613D68945977F81E0E4D382D4201D393
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

87424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

12B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_f2917f3ee744cefe338616ff8d890d486b3968b530beee55687fe2b02f07081b.bin

generic