f553878b31c1b814439c2905e513e569_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f553878b31c1b814439c2905e513e569_JaffaCakes118
Size

844KB
MD5

f553878b31c1b814439c2905e513e569
SHA1

2e1d3c9ca897cb626a107a25b81b8b9fe7fa766c
SHA256

0922fe875f3f9f4eba13ee656eeefba0957568c4bdf39bcc7f2eb48d8be34b9a
SHA512

cc190b9fc09774507094975eba2a0798365454908e2dbade7a4eb3eec880ce674e9fbfd1402565e1013944180220b044b0af40689b031971295821f1ee552e29
SSDEEP

24576:Z40w+ryYVdHb+5GpqeLgMcmhOh+VhSHDw:Z4DuygdrpekVhkDw

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 2 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/diyoem.exe	aspack_v212_v242
static1/unpack001/guide.exe	aspack_v212_v242

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/diyoem.exe
unpack001/guide.exe

Files

f553878b31c1b814439c2905e513e569_JaffaCakes118
.rar
diyoem.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 248KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
guide.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
help.chm
.chm
language/English.ini
language/Japanese.ini
language/简体中文.ini
language/羉砰いゅ.ini
oemdata/Celeron/OEMINFO.INI
oemdata/Celeron/OEMLINK.ICO
oemdata/Celeron/oemlogo.bmp
oemdata/Celerond/OEMINFO.INI
oemdata/Celerond/OEMLINK.ICO
oemdata/Celerond/oemlogo.bmp
oemdata/Celeronm/OEMINFO.INI
oemdata/Celeronm/OEMLINK.ICO
oemdata/Celeronm/OEMLOGO.BMP
oemdata/Sempron/OEMINFO.INI
oemdata/Sempron/oemlink.ico
oemdata/Sempron/oemlogo.bmp
oemdata/Tsunis/OEMINFO.INI
oemdata/Tsunis/OEMLINK.ICO
oemdata/Tsunis/OEMLOGO.BMP
oemdata/a64m/OEMINFO.INI
oemdata/a64m/oemlink.ico
oemdata/a64m/oemlogo.bmp
oemdata/acer/OEMINFO.INI
oemdata/acer/OEMLINK.ico
oemdata/acer/OEMLOGO.BMP
oemdata/althonmp/OEMINFO.INI
oemdata/althonmp/oemlink.ico
oemdata/althonmp/oemlogo.bmp
oemdata/ascend/OEMINFO.INI
oemdata/ascend/OEMLINK.ICO
oemdata/ascend/oemlogo.bmp
oemdata/asus/OEMINFO.INI
oemdata/asus/OEMLINK.ICO
oemdata/asus/OEMLOGO.BMP
oemdata/athlon/OEMINFO.INI
oemdata/athlon/oemlink.ico
oemdata/athlon/oemlogo.bmp
oemdata/athlon64/OEMINFO.INI
oemdata/athlon64/oemlink.ico
oemdata/athlon64/oemlogo.bmp
oemdata/athlon64fx/OEMINFO.INI
oemdata/athlon64fx/oemlink.ico
oemdata/athlon64fx/oemlogo.bmp
oemdata/athlonx2/OEMINFO.INI
oemdata/athlonx2/oemlink.ico
oemdata/athlonx2/oemlogo.bmp
oemdata/athlonxp/OEMINFO.INI
oemdata/athlonxp/oemlink.ico
oemdata/athlonxp/oemlogo.bmp
oemdata/bayi/OEMINFO.INI
oemdata/bayi/OEMLINK.ICO
oemdata/bayi/oemlogo.bmp
oemdata/benq/OEMINFO.INI
oemdata/benq/OEMLINK.ICO
oemdata/benq/oemlogo.bmp
oemdata/blank.bmp
oemdata/bluestar/OEMINFO.INI
oemdata/bluestar/OEMLINK.ICO
oemdata/bluestar/oemlogo.bmp
oemdata/boe/OEMLINK.ICO
oemdata/boe/oeminfo.ini
oemdata/boe/oemlogo.bmp
oemdata/centrino/OEMINFO.INI
oemdata/centrino/OEMLINK.ICO
oemdata/centrino/oemlogo.bmp
oemdata/compaq/OEMINFO.INI
oemdata/compaq/OEMLINK.ICO
oemdata/compaq/OEMLOGO.BMP
oemdata/core2d/OEMINFO.INI
oemdata/core2d/OEMLINK.ICO
oemdata/core2d/OEMLOGO.bmp
oemdata/core2e/OEMINFO.INI
oemdata/core2e/OEMLINK.ICO
oemdata/core2e/OEMLOGO.bmp
oemdata/core2q/OEMINFO.INI
oemdata/core2q/OEMLINK.ICO
oemdata/core2q/OEMLOGO.bmp
oemdata/coreduo/OEMINFO.INI
oemdata/coreduo/OEMLINK.ICO
oemdata/coreduo/OEMLOGO.BMP
oemdata/cores/OEMINFO.INI
oemdata/cores/OEMLINK.ICO
oemdata/cores/OEMLOGO.bmp
oemdata/crusoe/OEMINFO.INI
oemdata/crusoe/oemlink.ico
oemdata/crusoe/oemlogo.bmp
oemdata/dell/OEMINFO.INI
oemdata/dell/OEMLINK.ICO
oemdata/dell/OEMLOGO.BMP
oemdata/duron/OEMINFO.INI
oemdata/duron/oemlink.ico
oemdata/duron/oemlogo.bmp
oemdata/eway/OEMINFO.INI
oemdata/eway/OEMLINK.ICO
oemdata/eway/oemlogo.bmp
oemdata/founder/OEMINFO.INI
oemdata/founder/OEMLINK.ICO
oemdata/founder/OEMLOGO.BMP
oemdata/fuji/OEMINFO.INI
oemdata/fuji/OEMLINK.ICO
oemdata/fuji/OEMLOGO.BMP
oemdata/gw/OEMINFO.INI
oemdata/gw/OEMLINK.ICO
oemdata/gw/oemlogo.bmp
oemdata/haier/OEMINFO.INI
oemdata/haier/OEMLINK.ICO
oemdata/haier/oemlogo.bmp
oemdata/hasee/OEMINFO.INI
oemdata/hasee/OEMLINK.ICO
oemdata/hasee/oemlogo.bmp
oemdata/hedy/OEMINFO.INI
oemdata/hedy/OEMLINK.ICO
oemdata/hedy/OEMLOGO.BMP
oemdata/hisense/OEMINFO.INI
oemdata/hisense/OEMLINK.ICO
oemdata/hisense/oemlogo.bmp
oemdata/hp/OEMINFO.INI
oemdata/hp/OEMLINK.ICO
oemdata/hp/OEMLOGO.BMP
oemdata/ibm/OEMINFO.INI
oemdata/ibm/OEMLINK.ICO
oemdata/ibm/OEMLOGO.BMP
oemdata/itanium/OEMINFO.INI
oemdata/itanium/OEMLINK.ICO
oemdata/itanium/oemlogo.bmp
oemdata/k6i/OEMINFO.INI
oemdata/k6i/oemlink.ico
oemdata/k6i/oemlogo.bmp
oemdata/k6ii/OEMINFO.INI
oemdata/k6ii/oemlink.ico
oemdata/k6ii/oemlogo.bmp
oemdata/k6iii/OEMINFO.INI
oemdata/k6iii/oemlink.ico
oemdata/k6iii/oemlogo.bmp
oemdata/legend/OEMINFO.INI
oemdata/legend/OEMLINK.ICO
oemdata/legend/OEMLOGO.bmp
oemdata/lenovo/OEMLINK.ICO
oemdata/lenovo/oeminfo.ini
oemdata/lenovo/oemlogo.bmp
oemdata/lg/OEMINFO.INI
oemdata/lg/OEMLINK.ICO
oemdata/lg/oemlogo.bmp
oemdata/nec/OEMINFO.INI
oemdata/nec/OEMLINK.ICO
oemdata/nec/oemlogo.bmp
oemdata/opteron/OEMINFO.INI
oemdata/opteron/oemlink.ico
oemdata/opteron/oemlogo.bmp
oemdata/others/Aqua OS.ico
oemdata/others/bfly.ico
oemdata/others/oemdiy.bmp
oemdata/p3/OEMINFO.INI
oemdata/p3/OEMLINK.ICO
oemdata/p3/oemlogo.bmp
oemdata/p4/OEMINFO.INI
oemdata/p4/OEMLINK.ICO
oemdata/p4/oemlogo.bmp
oemdata/p4ht/OEMINFO.INI
oemdata/p4ht/OEMLINK.ICO
oemdata/p4ht/oemlogo.bmp
oemdata/pd/OEMINFO.INI
oemdata/pd/OEMLINK.ICO
oemdata/pd/oemlogo.bmp
oemdata/pe/OEMINFO.INI
oemdata/pe/OEMLINK.ICO
oemdata/pe/oemlogo.bmp
oemdata/pm/OEMINFO.INI
oemdata/pm/OEMLINK.ICO
oemdata/pm/oemlogo.bmp
oemdata/samsung/OEMINFO.INI
oemdata/samsung/OEMLINK.ICO
oemdata/samsung/OEMLOGO.BMP
oemdata/sempronm/OEMINFO.INI
oemdata/sempronm/oemlink.ico
oemdata/sempronm/oemlogo.bmp
oemdata/sony/OEMINFO.INI
oemdata/sony/OEMLINK.ICO
oemdata/sony/OEMLOGO.BMP
oemdata/star/OEMLINK.ICO
oemdata/star/oeminfo.ini
oemdata/star/oemlogo.bmp
oemdata/tcl/OEMINFO.INI
oemdata/tcl/OEMLINK.ICO
oemdata/tcl/OEMLOGO.BMP
oemdata/thtf/OEMINFO.INI
oemdata/thtf/OEMLINK.ICO
oemdata/thtf/OEMLOGO.BMP
oemdata/tosh/OEMINFO.INI
oemdata/tosh/OEMLINK.ICO
oemdata/tosh/OEMLOGO.BMP
oemdata/turion64/OEMINFO.INI
oemdata/turion64/oemlink.ico
oemdata/turion64/oemlogo.bmp
oemdata/viac3/OEMINFO.INI
oemdata/viac3/OEMLINK.bmp
oemdata/viac3/OEMLOGO.bmp
oemdata/viac7/OEMINFO.INI
oemdata/viac7/OEMLINK.bmp
oemdata/viac7/oemlogo.bmp
oemdata/viac7m/OEMINFO.INI
oemdata/viac7m/OEMLINK.bmp
oemdata/viac7m/OEMLOGO.bmp
oemdata/viaeden/OEMINFO.INI
oemdata/viaeden/OEMLINK.bmp
oemdata/viaeden/OEMLOGO.bmp
oemdata/xeon/OEMINFO.INI
oemdata/xeon/OEMLINK.ICO
oemdata/xeon/oemlogo.bmp
oemdata/xinlan/OEMINFO.INI
oemdata/xinlan/OEMLINK.ICO
oemdata/xinlan/oemlogo.bmp
oemdiy.ini
readme.txt
tips.txt
whatnew.txt
下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 248KB - Virtual size: 624KB

DATA Size: 4KB - Virtual size: 12KB

BSS Size: - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 48KB

.rsrc Size: 113KB - Virtual size: 212KB

.aspack Size: 13KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Sections

CODE Size: 5KB - Virtual size: 12KB

DATA Size: 512B - Virtual size: 4KB

BSS Size: - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 12KB

.aspack Size: 15KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

CODE
Size: 248KB - Virtual size: 624KB

DATA
Size: 4KB - Virtual size: 12KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 48KB

.rsrc
Size: 113KB - Virtual size: 212KB

.aspack
Size: 13KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB

CODE
Size: 5KB - Virtual size: 12KB

DATA
Size: 512B - Virtual size: 4KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 12KB

.aspack
Size: 15KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB