e2b431f13adb4da45521f145f83d82ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2b431f13adb4da45521f145f83d82ed_JaffaCakes118
Size

47KB
MD5

e2b431f13adb4da45521f145f83d82ed
SHA1

c3b189eecdd9d89b9b95f50ef5a7412c41e1c55f
SHA256

e1d5402a8b899a35756b583e32a1282c762cca0dc4f09e080847fee7f5251f57
SHA512

a072389f2c0860bc5142f70a02c899b383b4186bac6aa20800fca6244f550cf3be773c23361a6415f936ead92ecf619eaa9acc4aa9ee6ac1613e87b58c55d3bd
SSDEEP

768:u6Vv+X2/oTSgcy6enY2Fw4TXstUoOXBRYvCwYOPFtBZyt/cgxLha5+Q2EqbpCUNx:ryDSnynn1Fw4ottOxRYqwYsZS/FL1n

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2b431f13adb4da45521f145f83d82ed_JaffaCakes118

Files

e2b431f13adb4da45521f145f83d82ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE