27be3544fca0e8f3acbf33847bdfde5d_JaffaCakes118 | Triage

Sharing

General

Target

27be3544fca0e8f3acbf33847bdfde5d_JaffaCakes118
Size

82KB
MD5

27be3544fca0e8f3acbf33847bdfde5d
SHA1

f5df02bcc9666b9bd65e438eaf8b612ca4c68178
SHA256

cdb54b60b84bb9eb6139135637274f9d5be81670ef4da6b6a6f52715f33b260c
SHA512

b76028245b2796d6619822ff4aed176c32ce58b8f758fa33c0cc58320ec62f6935e3d4dc7bd1c6e02ce5a1dd7c8c8b0b61cbb724864fb51fdd7197130f1e2c40
SSDEEP

1536:VG3IwzRCLVHeBB2LO1b/IaSRfXrCaV4cuRACAQL:VG4wtWZLyb/Iz0aVCRkI

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27be3544fca0e8f3acbf33847bdfde5d_JaffaCakes118

Files

27be3544fca0e8f3acbf33847bdfde5d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE