0db62d0ed473b87e2c7113c6a373e771_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0db62d0ed473b87e2c7113c6a373e771_JaffaCakes118
Size

114KB
MD5

0db62d0ed473b87e2c7113c6a373e771
SHA1

21d18e58241535458e582d2903332c9a20f16938
SHA256

9a33c8e9a2f607e32b986384569828bdc76f2f40dda767be3041a6ded3b813b1
SHA512

cb1bf90b5a5117b02a416c08de8b958d76d405772ab67386b79d5a1eac66b29a0c7f2cce5b56116cb1f11df64640273a3bf1a1c3706763b980ad696e20902680
SSDEEP

3072:/DX46bRj9n6vFV6ZqE5TDp/j7EkPFduYClP:L5Z6vFVDEN9j7ZFEdP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
static1/unpack001/Deus_Ex_Human_Revolution_V1.1622_Plus_8_Trainer_Fix1_By_KelSat.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Deus_Ex_Human_Revolution_V1.1622_Plus_8_Trainer_Fix1_By_KelSat.exe

Files

0db62d0ed473b87e2c7113c6a373e771_JaffaCakes118
.rar
Deus_Ex_Human_Revolution_V1.1622_Plus_8_Trainer_Fix1_By_KelSat.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE