17b53ca08c773cb021fe8a5d86dd5df1_JaffaCakes118 | Triage

Sharing

General

Target

17b53ca08c773cb021fe8a5d86dd5df1_JaffaCakes118
Size

718KB
MD5

17b53ca08c773cb021fe8a5d86dd5df1
SHA1

dfed6384fbaa9f59fce2dfecc3c4e92c4e09b130
SHA256

dd8ac8dbf3346925b0f25a6dd5d90a2b6aebc4e70e0c64cd1975661510424704
SHA512

5a5a9bab3428fdfa6776aead79051240fb322b16724ba58f9006c6c7cc920ea2c1a5f89831df151f0fc0674659c962245ac70c9d405675243b8e88caf4a82124
SSDEEP

12288:xB5L5iuHLFj7AfupHgV1nuSUBk61k6axQnYHCQH5QzwK0ro98AqYnfGuPtBIQq4x:35LLdAfuAV1nFUBpaqYHIzYcBqYnOunZ

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b53ca08c773cb021fe8a5d86dd5df1_JaffaCakes118

Files

17b53ca08c773cb021fe8a5d86dd5df1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 704KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE