168fd671500a3a65d1bc0c65312dcd21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

168fd671500a3a65d1bc0c65312dcd21_JaffaCakes118
Size

236KB
MD5

168fd671500a3a65d1bc0c65312dcd21
SHA1

06d451bf7298d1a536abb43d00449768297d2870
SHA256

f7c7c0b2ca1a34d4686ee1abab6ba4eea1b9255676a9dc5c2d2ca8268346e483
SHA512

516aa8c0a40b9f7712d27eedcaf4f2be9a0851fa426ff45db21a2a8b629be97f1e2aa903656f493591b606701e68a43c2c28f1719e964e62522821f14ae0e4e8
SSDEEP

3072:9Qd4myBOY27rgSmIJX47TnVkgKD0Su+5fPYY4ME9k7QNYAwSUvKhbTs3dtPVnQPn:w4ZYY2ngSm20Vk0S5BCeQxUqbTOuD

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
168fd671500a3a65d1bc0c65312dcd21_JaffaCakes118

Files

168fd671500a3a65d1bc0c65312dcd21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 109KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE