035abd09695adf98bd177a14a8787fb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

035abd09695adf98bd177a14a8787fb8_JaffaCakes118
Size

221KB
MD5

035abd09695adf98bd177a14a8787fb8
SHA1

f70bff798cab4d25f0e02d775626661790369983
SHA256

ac246e83a34442b0b464460798f35fc3d35f022e5950cc7b6054165eff1a8d47
SHA512

4cc6e3f69deb91ae60996fdaa9a2998fc5e28a5e9669f288848fc35dfee97176c19b3c4b125dc8c11cd16c4e78edfc83b76f147936806cd541417a95c81d7ced
SSDEEP

6144:606n75tIAAQz50N95Usc66CRIdW+8BwcLd0SiAX0:p6n73kQz2N5r6CCd/8BWSPX0

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/stalker9v1.0003.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/stalker9v1.0003.exe

Files

035abd09695adf98bd177a14a8787fb8_JaffaCakes118
.zip
gameguru.nfo
gamehacking_2005.nfo
stalker9v1.0003.TXT
stalker9v1.0003.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stalker9v1.0003.nfo