0e4b086e2589aa0d0a82b09b0000abea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e4b086e2589aa0d0a82b09b0000abea_JaffaCakes118
Size

1.7MB
MD5

0e4b086e2589aa0d0a82b09b0000abea
SHA1

1bd99bc025f7a286a54017edc11b813a48632230
SHA256

4b498239fce04280f149c74c72a7784b687134148ef3b4d1f4a01e89faec29e3
SHA512

c60b60b4e830735626e69c1d143b10a0fc72d71d5fa7405cda85b60628a0bfc44c62774bff3037874d4ed906d0e556b1754b5c9ed5481445122940eba8547499
SSDEEP

49152:W5dRvXojdvIdG4OcqabulkqRnR1cn7kPG4PenrUuotDUOYX:2dCjydG4T/C7n1cZnrMyOYX

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e4b086e2589aa0d0a82b09b0000abea_JaffaCakes118

Files

0e4b086e2589aa0d0a82b09b0000abea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

wHdcM:d0
Size: 483KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

^Hy(,F-E
Size: 19KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

?>U.a:u$
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

M:f\5q/N
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iLZZ6K\W
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

'=PVMj?*
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

K.vM#=G+
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qQ>[j"A0
Size: 739KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

28#b5os]
Size: 306KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7nX,B^^B
Size: 86KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u-bd)S8j
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

D xMUA"H
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

F4:TTkw1
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

wHdcM:d0 Size: 483KB - Virtual size: 1.1MB

^Hy(,F-E Size: 19KB - Virtual size: 32KB

?>U.a:u$ Size: - Virtual size: 8KB

M:f\5q/N Size: 12KB - Virtual size: 16KB

iLZZ6K\W Size: - Virtual size: 4KB

'=PVMj?* Size: 512B - Virtual size: 4KB

K.vM#=G+ Size: 60KB - Virtual size: 64KB

qQ>[j"A0 Size: 739KB - Virtual size: 1.2MB

28#b5os] Size: 306KB - Virtual size: 316KB

7nX,B^^B Size: 86KB - Virtual size: 92KB

u-bd)S8j Size: - Virtual size: 68KB

D xMUA"H Size: 6KB - Virtual size: 8KB

F4:TTkw1 Size: - Virtual size: 4KB

wHdcM:d0
Size: 483KB - Virtual size: 1.1MB

^Hy(,F-E
Size: 19KB - Virtual size: 32KB

?>U.a:u$
Size: - Virtual size: 8KB

M:f\5q/N
Size: 12KB - Virtual size: 16KB

iLZZ6K\W
Size: - Virtual size: 4KB

'=PVMj?*
Size: 512B - Virtual size: 4KB

K.vM#=G+
Size: 60KB - Virtual size: 64KB

qQ>[j"A0
Size: 739KB - Virtual size: 1.2MB

28#b5os]
Size: 306KB - Virtual size: 316KB

7nX,B^^B
Size: 86KB - Virtual size: 92KB

u-bd)S8j
Size: - Virtual size: 68KB

D xMUA"H
Size: 6KB - Virtual size: 8KB

F4:TTkw1
Size: - Virtual size: 4KB