1a9ec38cb3501782be813646a6640cdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a9ec38cb3501782be813646a6640cdf_JaffaCakes118
Size

50KB
MD5

1a9ec38cb3501782be813646a6640cdf
SHA1

36bdb720ebb174a421f0cf844086f5c14a244413
SHA256

da5cbe1182b415dc30d8451616a934b2f67cc60961ed4849b44ee09ff80e71a5
SHA512

8aa29650ad1305ca1dab34188d247c9ea684e02fa569134db27302ae257d82edbfffd6e2d4c0109969a74bbe5a77be7c39ecfd88244c74c2467ae7883c9b9acd
SSDEEP

768:a1/V6K+eAVvcwD4PAey6o6T8xj3Kdg60aWChppWYQf0GLx6P9IG1xsdeV:a9V6K+e6v5cAAdgQ1K0LIP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a9ec38cb3501782be813646a6640cdf_JaffaCakes118

Files

1a9ec38cb3501782be813646a6640cdf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE