069192c720bbd7a4514a6a0a9f7201b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

069192c720bbd7a4514a6a0a9f7201b3_JaffaCakes118
Size

437KB
MD5

069192c720bbd7a4514a6a0a9f7201b3
SHA1

b3e0aa085837f346717da188c7587ab24290cc0f
SHA256

97bba522694f6a1c24d12f55f2a13a6fb01ff19570edb7e0f372078de83196c8
SHA512

9f9c2d882fb0835ec9f301fd2c1189967a744377930b533a34917a783d7028a4d9b943fcb6c649d3ea3ca6b5d377ca92abe1f0bfe183ce331a11060f34545111
SSDEEP

6144:4Wb5cT2XXEuC8YgrRX4nLPeK1ml0QCurl2aAK3MPTwO4/15uFCGZ3XL+SAFoLR:yKHtlXqLBw0zurYQm8OAzM1+SAoL

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
069192c720bbd7a4514a6a0a9f7201b3_JaffaCakes118

Files

069192c720bbd7a4514a6a0a9f7201b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 404KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE