20cdd8e5b319d61e3cddc8c832f62806_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

20cdd8e5b319d61e3cddc8c832f62806_JaffaCakes118
Size

508KB
MD5

20cdd8e5b319d61e3cddc8c832f62806
SHA1

7eed77b196e72232b95c7b89db2206e376ca4b28
SHA256

be4d729f21b8e85479f21f1bdd89910b5603db51536931e6589f8798418776df
SHA512

3ae216d47c0035bb48de10663dc251f346dcc961a3a9c5539b925120a81c8ce3584945a93d1a86618ae849d25ae1ca7b546f9225f3f63673fa9bd6fcaca60004
SSDEEP

6144:Ajzxt76W0obUV7+O0F+2MOm263u9lAHm51FW9Bg+KY1CPGFaVls7Ya0IPseBVZ5H:+VUV7n0Mx3elAHmJTuSGJ0FbeB7yG0I

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20cdd8e5b319d61e3cddc8c832f62806_JaffaCakes118

Files

20cdd8e5b319d61e3cddc8c832f62806_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.smcz86
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ds8mhe
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1s8$kx
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zjsrx1
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.m5umfs
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jpxlx8
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0eoc5q
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gytgjh
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: - Virtual size: 3.0MB

.packed
Size: - Virtual size: 412KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rbss
Size: 498KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.smcz86 Size: 2KB - Virtual size: 20KB

.ds8mhe Size: - Virtual size: 1KB

.1s8$kx Size: - Virtual size: 1KB

.zjsrx1 Size: - Virtual size: 10KB

.m5umfs Size: - Virtual size: 1KB

.jpxlx8 Size: - Virtual size: 8B

.0eoc5q Size: - Virtual size: 24B

.gytgjh Size: - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 384KB

.rtss Size: - Virtual size: 3.0MB

.packed Size: - Virtual size: 412KB

.rbss Size: 498KB - Virtual size: 500KB

.aspack Size: 6KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.smcz86
Size: 2KB - Virtual size: 20KB

.ds8mhe
Size: - Virtual size: 1KB

.1s8$kx
Size: - Virtual size: 1KB

.zjsrx1
Size: - Virtual size: 10KB

.m5umfs
Size: - Virtual size: 1KB

.jpxlx8
Size: - Virtual size: 8B

.0eoc5q
Size: - Virtual size: 24B

.gytgjh
Size: - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 384KB

.rtss
Size: - Virtual size: 3.0MB

.packed
Size: - Virtual size: 412KB

.rbss
Size: 498KB - Virtual size: 500KB

.aspack
Size: 6KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB