f7960f5d5fd32063af3f1f82c117b27a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7960f5d5fd32063af3f1f82c117b27a_JaffaCakes118
Size

19.5MB
MD5

f7960f5d5fd32063af3f1f82c117b27a
SHA1

889bc68bd484112ac672dc83b9071f2dd7edcea6
SHA256

e4208e85c545383f3105c1b086c5cb3b9efd909f6cb4ca803460680deef2f1fb
SHA512

96e4c5bb2f4a6506d6bf9f0804d6a95f7f2cc8a89f6eefec568bd40aeb930ab7f999f907cd16a8ac1a34dcc4bf042aa900fc5e8f3561a5ec2d19f49bb1335faf
SSDEEP

393216:7TUA3if1V/Ja/63HbocrLbUx8bLUALxoA+WuHcoP4yyvgMFean:Jg3RayLr0mb2FgT

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7960f5d5fd32063af3f1f82c117b27a_JaffaCakes118

Files

f7960f5d5fd32063af3f1f82c117b27a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.5MB - Virtual size: 19.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Yaron
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE