b058232c98cfe0141c897bb801fbcc05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b058232c98cfe0141c897bb801fbcc05_JaffaCakes118
Size

541KB
MD5

b058232c98cfe0141c897bb801fbcc05
SHA1

247c8018c15127f7503881c1ddcff051f18671ee
SHA256

bf62fe59517dcd5f0e158c21ba50aa429febda2369d39a1cefcc97a42aa4f2c4
SHA512

bfbc8840926d42cbb1e98b36eb28789046feb655a89e0e2fdc8c7fd4e0df34d0c7ad4c7020d5e036e0f3f443e13ef624a7e3da982baf79c2a25f7c102583e8d6
SSDEEP

12288:dfUl36UEP57yoOdiwKg6Os9x13fxuu86yxenrhdYX2pKmV0:UqUEPpy9fCfxty92UmV0

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b058232c98cfe0141c897bb801fbcc05_JaffaCakes118

Files

b058232c98cfe0141c897bb801fbcc05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 343KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 135KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE