4687af0e5e990b185778ac43604a888c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4687af0e5e990b185778ac43604a888c_JaffaCakes118
Size

665KB
MD5

4687af0e5e990b185778ac43604a888c
SHA1

ba99daba52e3a9491d891538a9c92762cdc70edd
SHA256

2e668defe68c18a1d2c3286ace02c298d29b201b1fae59f809cca8df779e2585
SHA512

5e371c101c38391b717a373151471c296d2dd22c420923808671c696cb68f1dd985e41466482895b62e8082769a8dd26a7c28f74ff3fbf76c85d16b37c3cfa50
SSDEEP

12288:yWxjH0O8K55R2z2FBy6RLhgG45g1xYyzRDOJxQKpm5GFSZ9sp:yWtH0DGFu6RLeGggbYyz54XpmIIg

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/倒计时器_8_00_绿色版_Jisuxz.com.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/倒计时器_8_00_绿色版_Jisuxz.com.exe

Files

4687af0e5e990b185778ac43604a888c_JaffaCakes118
.rar
使用说明.html
使用说明.url
倒计时器_8_00_绿色版_Jisuxz.com.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
极速软件下载.url