fd705fb7d1aa37c4aee9e44dc27e1d14_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd705fb7d1aa37c4aee9e44dc27e1d14_JaffaCakes118
Size

550KB
MD5

fd705fb7d1aa37c4aee9e44dc27e1d14
SHA1

db0ec83f646bc414a9c4514322e63e056e923a93
SHA256

74ac235d5d635ecf62208bbf74e625bfc734967c3fa63db8d2a55029a05c97f3
SHA512

653662058ce5caea42eedf234a937ef2a25e9fe8e70bd2b86530b6d4638319cbda860b79c562a39ce1d38638f4e3238ec7a01b57bc75dde35480f9dbf2677947
SSDEEP

12288:Nx6svPfS1FufYuZE2gt1rpNg+q+nv6JHCBLxE2ms9ZysnOuS213bMw:PVvUFuYoQMoyVaLxlmzKOC3bH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd705fb7d1aa37c4aee9e44dc27e1d14_JaffaCakes118

Files

fd705fb7d1aa37c4aee9e44dc27e1d14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 416KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 19KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: 1024B - Virtual size: 131.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo0
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo1
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo2
Size: 3KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.topo3
Size: 4KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

Size: 416KB - Virtual size: 1.3MB

Size: 12KB - Virtual size: 24KB

Size: 19KB - Virtual size: 60KB

0 Size: 1024B - Virtual size: 131.4MB

.rsrc Size: 8KB - Virtual size: 12KB

.data Size: 69KB - Virtual size: 72KB

.adata Size: - Virtual size: 4KB

.mackt Size: 2KB - Virtual size: 8KB

.topo0 Size: 3KB - Virtual size: 880KB

.topo1 Size: 3KB - Virtual size: 880KB

.topo2 Size: 3KB - Virtual size: 880KB

.topo3 Size: 4KB - Virtual size: 880KB

.aspack Size: 5KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

0
Size: 1024B - Virtual size: 131.4MB

.rsrc
Size: 8KB - Virtual size: 12KB

.data
Size: 69KB - Virtual size: 72KB

.adata
Size: - Virtual size: 4KB

.mackt
Size: 2KB - Virtual size: 8KB

.topo0
Size: 3KB - Virtual size: 880KB

.topo1
Size: 3KB - Virtual size: 880KB

.topo2
Size: 3KB - Virtual size: 880KB

.topo3
Size: 4KB - Virtual size: 880KB

.aspack
Size: 5KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB