e9c6ce30a3e381a65c8942348ac113ec_JaffaCakes118 | Triage

Sharing

General

Target

e9c6ce30a3e381a65c8942348ac113ec_JaffaCakes118
Size

321KB
MD5

e9c6ce30a3e381a65c8942348ac113ec
SHA1

e5274dbf65ad6c8c1a3087ccfc0b23229923f922
SHA256

f98b81489049adf37007546154afe3285d3f4668d0da700bfde6b8af864c7c4f
SHA512

0de35fd03822c7b35db8ebd721852836c082ee7007bdfeeefde78df99c9efe934f59816a9f3cf185204e71ead93a1c1874d7c0797bbbf609672a20cf89635b6a
SSDEEP

6144:6WhFgc3JOu85AnpgtT+R7Ze+RyH/VegsRMxlAPzvc:6MPU+npwTU7Y/SRMxlALk

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9c6ce30a3e381a65c8942348ac113ec_JaffaCakes118

Files

e9c6ce30a3e381a65c8942348ac113ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE