jaffacakes118_1c4f6d6147d092d1adc9a837c74213d068a26b88692ea13556321f4578cbfe84[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_1c4f6d6147d092d1adc9a837c74213d068a26b88692ea13556321f4578cbfe84.bin
Size 2.7MB
Sample261017-khc19acx5v
SHA256 1c4f6d6147d092d1adc9a837c74213d068a26b88692ea13556321f4578cbfe84
MD5 858c0a84ebf557704f5771447b97d387
SHA1 2b6e9a6ef1f129bd4b1ee12a79279b3240ffc427
SHA512 f05a7baf0aed4295c4db89f4e1317d74694e40b03fc673ad74bc9108fe020f31cc77ed401861bcff56f87e384c3cebe042f60f2f8aefbf0791181c0866ee98e8
SSDEEP 49152:R5Ng3BCP5p5JBHw5KfWa84swzxtakWN7rIFWOgGFdD:RDJPr5J28/8CWdEkOrD
TLSH
T12CD533C37A801C36E416907FB1247B10F71E6C208B76CF07AAB8798A47BD55196E3B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_1c4f6d6147d092d1adc9a837c74213d068a26b88692ea13556321f4578cbfe84.bin
unpack001/out.upx

File Explorer

jaffacakes118_1c4f6d6147d092d1adc9a837c74213d068a26b88692ea13556321f4578cbfe84.bin

.exe 2.7MB
out.upx

.exe 4.9MB

jaffacakes118_1c4f6d6147d092d1adc9a837c74213d068a26b88692ea13556321f4578cbfe84.bin

SHA256 1c4f6d6147d092d1adc9a837c74213d068a26b88692ea13556321f4578cbfe84
MD5 858c0a84ebf557704f5771447b97d387
SHA1 2b6e9a6ef1f129bd4b1ee12a79279b3240ffc427
SHA512 f05a7baf0aed4295c4db89f4e1317d74694e40b03fc673ad74bc9108fe020f31cc77ed401861bcff56f87e384c3cebe042f60f2f8aefbf0791181c0866ee98e8
SSDEEP 49152:R5Ng3BCP5p5JBHw5KfWa84swzxtakWN7rIFWOgGFdD:RDJPr5J28/8CWdEkOrD
TLSH
T12CD533C37A801C36E416907FB1247B10F71E6C208B76CF07AAB8798A47BD55196E3B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5156432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 359476763f4ba8b783946c10c41e2ee9126d99efa264bc45793be4cef8296a20
MD5 79b294bfd837c5f9721a72d76f1f1745
SHA1 2777a5d86a9e9bf3f6962746f8208ef5d5558eaf
SHA512 8a47427925d4fb088a5733da409d96e5d7dd31d812d35fd2367aae0eae9d6fc31033db28fde4c52f6009c9fc3e3feaaa3eba00ec49deff340353600a64d1b075
SSDEEP 98304:FPh16666666666666666666666666666666x666666666666666fwwwwwwwwwwwx:fVCgJ8QcQp++vJON9evb816vckdwb7G2
TLSH
T13F368D02F5955025E5FB26B1FC3CA7391B253E5A8FF188EBB2852C482F702C1763579A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

94140

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

281KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.voltbl

Size

512B

Virtual Size

126B

Characteristics

Name

.rsrc

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jaffacakes118_1c4f6d6147d092d1adc9a837c74213d068a26b88692ea13556321f4578cbfe84.bin

generic

out.upx

generic